Orion Login with SMS WordPress Plugin Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Orion Login with SMS plugin for WordPress, affecting all versions through 1.0.5. The issue arises because the olws_handle_verify_phone() function uses a weak one-time password (OTP) mechanism, exposing the hash required to generate the OTP. Additionally, there are no limitations on the number of attempts to submit the verification code. This vulnerability allows unauthenticated attackers to log in as other users, including administrators, if they can access the user's phone number.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling attackers to log in as other users, including administrators.