OTP Login & Register Woocommerce CVE Debriefs

OTP Login & Register Woocommerce CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review OTP Login & Register Woocommerce CVE published 2026-10-16

CVE-2026-110135

The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, allowing an unauthenticated attacker to bypass the limit and brute-force the short numeric login code, potentially leading to account takeovers without a password. Defenders should assess exposure and prioritize remediation to prevent such attacks. The vulnerability is trac [truncated]