OTP Login With Phone Number, OTP Verification
Explore OTP Login With Phone Number, OTP Verification vulnerabilities across all versions. Currently tracking 14 known vulnerabilities, including severity, impact, and patch status.
Vulnerability Records

OTP Login With Phone Number, OTP Verification
Author
Hamid Alinia
OTP Login With Phone Number lets your users login and register using their mobile phone number — no password required. Send a One-Time Password (OTP) via SMS or Firebase and authenticate instantly. Works seamlessly with WordPress and is fully compatible with WooCommerce login, registration, and checkout pages. Supports 20+ SMS gateways and lets you connect any custom SMS provider for free. 🔑 KEY FEATURES (FREE) Phone number login & registration — replace or extend the default WordPress login OTP via SMS or Firebase — free Firebase integration included Compatible with WooCommerce — works on My Account, checkout, and registration pages Compatible with LearnPress — OTP login on course checkout pages Email login — let users login with email + OTP (no password) Country flags & auto country code detection Passwordless login — frictionless UX, higher conversion rates Redirect after login/register to any URL Page protection — restrict pages to logged-in users only Password recovery via phone number OTP Existing user sync — match phone numbers already stored in user meta (e.g. WooCommerce billing phone) Store phone with or without country code Custom gateway — connect any SMS provider yourself via URL + JSON config GDPR-compliant Translation-ready — includes Persian (fa_IR), compatible with WPML & Polylang Multisite support Shortcodes for embedding login form anywhere Custom CSS support 📱 FREE SMS GATEWAYS Firebase — free OTP via Google Firebase (recommended for international sites) Twilio — international SMS gateway, free to configure Netgsm — Turkey SMS gateway Kavenegar — popular Iranian SMS gateway DrPayamak — Iranian SMS gateway Custom API — connect any SMS gateway using your own URL, headers, and body config 📱 PRO SMS GATEWAYS WhatsApp via UltraMessage Telegram MSG91 (India) Alibabacloud MessageBird Trustsignal Taqnyat (Arabic) 2Factor Textlocal Vonage SMS.ir MelliPayamak FarazSMS 🔌 COMPATIBLE WITH WooCommerce login, registration & checkout LearnPress course checkout Woodmart Theme sidebar login Elementor (via shortcode) WPForms (via shortcode) Contact Form 7 (via shortcode) WPBakery, Divi, Gutenberg (via shortcode) WPML & Polylang (translation-ready) ⚡ USE CASES eCommerce stores — reduce cart abandonment with frictionless phone login WooCommerce shops — phone-verified checkout without passwords Membership sites — verified user registration via OTP LMS platforms — secure student login for online courses Booking sites — quick login without password Any site wanting to reduce fake registrations and improve security 🚀 PRO VERSION Unlock advanced features with the Pro version: 15+ additional SMS gateways (Twilio, WhatsApp, Telegram, MSG91, and more) Advanced form builder & UI customization Custom registration fields Default user role assignment Custom gateway development support Priority support 📄 SHORTCODES [idehweb_lwp] — embed the login/register form anywhere [idehweb_lwp_metas phone_number="true" email="true"] — show logged-in user's phone/email [idehweb_lwp_verify_email] — email verification form 📚 Documentation & Support Full Documentation GitHub Repository Report Security Bug External Services This plugin uses the following external services: Firebase Authentication (optional — only when Firebase gateway is selected) – Verifies phone numbers via OTP – Data sent: phone number, IP address – Terms | Privacy Crisp Chat (optional, can be disabled in Settings > Installation) – Live chat support inside the plugin admin panel – Data sent: chat messages, name, email, IP address – Terms | Privacy Microsoft Clarity (optional, can be disabled in Settings > Installation) – Anonymous usage analytics on the plugin admin pages only. No visitor or frontend data collected. – Terms | Privacy
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C