CVE-2026-110135: OTP Login & Register Woocommerce 0 to before 2.7.3

Affected technology

OTP Login & Register Woocommerce · 0 to before 2.7.3
Vendor not specified by the source

Description’s affected range: before 2.7.3 does not adequately limit one-time-password verification attempts

Component: Not specified by the source

What an attacker can do

An unauthenticated attacker can bypass the limit and brute-force the short numeric login code to take over an account without its password.