description: The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_forgot_password' action.
problem types: Reflected Cross-Site Scripting
affected:
{
vendor: n/a
product: Login with Phone Number WordPress Plugin
versions:
version: < 1.4.2, status: affected
}