Authentication vulnerability in Orion Login with SMS 1.0.5

A security issue has been found in the Orion Login with SMS plugin for WordPress. This means that anyone can bypass the login process and access the website without proper authentication. This is because the plugin does not use a secure enough code to verify the user’s identity, making it easy for hackers to access the necessary information to log in. Also, there are no limits on the number of attempts to enter the code, making it easier for attackers to gain access. This can be particularly dangerous for website administrators if the attacker knows their phone number.