Skip to content
CVE / MITRECVE RecentΒ·Β·1 min read

CVE-2026-12492 - Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user

CVE ID :CVE-2026-12492 Published : July 16, 2026, 6 a. m. | 58 minutes ago Description :The Happy Coders OTP Login for WooCommerce WordPress plugin before 2.

8 does not verify that a one-time password was actually validated before authenticating a user based on a supplied identifier, allowing unauthenticated attackers to log in as any existing user, including administrators, as well as to create new accounts. Severity: 0.

Originally reported by CVE Recent
0 comments

0 comments

Posting as WittyTapir682
0/1000

No comments yet. Be the first to start the discussion.