AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-23492

HIGH · CVSS 8.8 EPSS 57.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2023-23492
Severity
HIGH
CVSS
8.8
EPSS
57.12%
WordPress

Original NVD Description

The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.