CVE-2025-14002 | WPCOM Member Plugin up to 1.7.16 on WordPress One-Time Password excessive authentication

December 15, 2025 Yanac

A vulnerability was found in WPCOM Member Plugin up to 1.7.16 on WordPress and classified as problematic. Impacted is an unknown function of the component One-Time Password Handler. Executing manipulation can lead to improper restriction of excessive authentication attempts.

This vulnerability is registered as CVE-2025-14002. It is possible to launch the attack remotely. No exploit is available.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.VulDB Recent EntriesRead More