Threats tagged 'ghsa-4v54-xc3w-xcgr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-106007The FraudLabs Pro SMS Verification WordPress plugin through 1.12.1 does not enforce its SMS-retry limit on the server Medium5.32026-11-10GCVE DatabaseCVE-2026-106007 The FraudLabs Pro SMS Verification WordPress plugin versions through 1.12.1 contain a vulnerability where the SMS-retry limit is not enforced on the server side. This flaw allows unauthenticated users to send unlimited verification SMS messages to arbitrary phone numbers, potentially exhausting the site owner's paid SMS credits and causing spam to third parties. Report on CVE-2026-106007 Vulnerability #ghsa-4v54-xc3w-xcgr	GCVE Database	2026-11-10

Page 1 of 1