Skip to content
PluginCanary

OTP Login With Phone Number, OTP Verification

by Hamid Alinia · 1,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 16 Oct 2026, fixed in 1.8.78.

81/ 100 Canary Score
Sub-scores for OTP Login With Phone Number, OTP Verification
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 1.8.78. Update to version 1.8.78 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 1.8.78. Update to version 1.8.78 or later.15 Oct 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master5 Aug 2020 to 5 Aug 2020, 1 commits
glboy6 Aug 2020 to 24 Oct 2026, 320 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
11 days ago
Releases, 24 months
109
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for OTP Login With Phone Number, OTP Verification
Q1 202428
Q2 202415
Q3 202413
Q4 20242
Q1 202531
Q2 202528
Q3 202528
Q4 20254
Q1 20262
Q2 20268
Q3 20264
Q4 20264

Last release 24 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
16 Oct 2026OTP Login With Phone Number, OTP Verification <= 1.8.77 - Unauthenticated Privilege Escalation7.3<= 1.8.771.8.780
15 Oct 2026OTP Login With Phone Number, OTP Verification <= 1.8.77 - Missing Authorization4.3<= 1.8.771.8.780
6 Aug 2026OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute Force9.8<= 1.8.701.8.710
28 May 2026OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification9.81.8.50 to 1.8.601.8.610
14 Aug 2025WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass8.1<= 1.8.471.8.480
14 Sep 2024Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation8.8<= 1.7.491.7.500
28 Jun 2024Login with phone number <= 1.7.35 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.7.351.7.360
18 Jun 2024Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism8.1<= 1.7.341.7.351
28 May 2024Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check9.8<= 1.7.261.7.270
3 May 2024Login with phone number <= 1.7.18 - Missing Authorization4.3<= 1.7.181.7.200
22 Apr 2024Login with phone number <= 1.6.93 - Missing Authorization5.3<= 1.6.931.6.940
15 Apr 2024Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege Escalation8.8<= 1.7.161.7.170
10 Apr 2024Login with phone number <= 1.6.93 - Cross-Site Request Forgery4.3<= 1.6.931.6.940
12 Sep 2023Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change8.8<= 1.5.61.5.74
12 Jan 2023Login with phone number <= 1.4.2 - Reflected Cross-Site Scripting6.1< 1.4.21.4.20
5 Jul 2022Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 1.3.71.3.8n/a
16 Feb 2022Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin Deletion6.5< 1.3.71.3.71

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.9 from 81 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star76
4 star2
3 star1
2 star0
1 star2

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for OTP Login With Phone Number, OTP Verification
4 May 2026151
11 May 2026205
18 May 2026230
25 May 2026391
1 Jun 2026357
8 Jun 2026644
15 Jun 2026267
22 Jun 2026992
29 Jun 2026339
6 Jul 2026306
13 Jul 2026254
20 Jul 2026655
27 Jul 2026335
3 Aug 2026550
10 Aug 2026371
17 Aug 2026674
24 Aug 2026358
31 Aug 2026337
7 Sep 2026470
14 Sep 2026806
21 Sep 2026447
28 Sep 2026658
5 Oct 20261,149
12 Oct 20261,505
19 Oct 20261,142
26 Oct 20261,173
2 Nov 202692

Weekly downloads over the last 4 weeks are 78% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

LoginizerScore 93 · 1,000,000+FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social LoginScore 93 · 10,000+All In One LoginScore 92 · 60,000+WPS Hide LoginScore 91 · 2,000,000+Temporary Login Without PasswordScore 91 · 90,000+

Facts

Version1.8.79
AuthorHamid Alinia
Added6 Aug 2020
Last updated24 Oct 2026
Active installs1,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHPnot stated
CategoryUser Management & Authentication > User Registration & Login
Tagsotp login, OTP Verification, sms verification, passwordless login, phone number login

Other plugins by this author: iw profile, Webruno CRM, Easy edit products, Yandex Map

Questions

Is OTP Login With Phone Number, OTP Verification still maintained?

OTP Login With Phone Number, OTP Verification was last updated on 24 Oct 2026. Its Canary status is Healthy.

Is OTP Login With Phone Number, OTP Verification safe?

OTP Login With Phone Number, OTP Verification has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns OTP Login With Phone Number, OTP Verification?

The wordpress.org author is Hamid Alinia. Recent committers: glboy, plugin-master. We have recorded no ownership change.

What can I use instead of OTP Login With Phone Number, OTP Verification?

Plugins in the same category with a higher Canary Score: Loginizer, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, All In One Login, WPS Hide Login, Temporary Login Without Password.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue