xootix OTP Login & Register Woocommerce

2 known vulnerabilities in xootix OTP Login & Register Woocommerce, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-12402 CVSS 4.4 medium The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' Setting in all…
CVE-2026-12215 CVSS 5.3 medium The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up…