CVE WATCH / VULNERABILITY DETAIL
CVE-2026-106007
MEDIUMCVSS 5.3NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
The FraudLabs Pro SMS Verification WordPress plugin through 1.12.1 does not enforce its SMS-retry limit on the server side, allowing unauthenticated users to send an unlimited number of verification SMS messages to attacker-chosen phone numbers, exhausting the site owner's paid SMS credits and spamm
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124937
- CVE-2026-124911
- CVE-2026-125745 MEDIUM 4.3
- CVE-2026-12573 HIGH 8.8
- CVE-2026-12572 HIGH 7.2
- CVE-2026-125715 MEDIUM 5.3
- CVE-2026-125712 HIGH 7.5
- CVE-2026-125706 MEDIUM 5.5
- CVE-2026-120326
- CVE-2026-95646 HIGH 8