Access violation vulnerability in WooCommerce OTP Login With Phone Number, OTP Verification 1.8.47

The WordPress plugin called “WooCommerce OTP Login With Phone Number, OTP Verification” has a security issue that could allow unauthorized people to access user accounts. This is because the plugin does not properly check for empty values in its code. As a result, attackers without proper authentication could bypass the OTP verification process and gain administrative control of any user account that has a phone number linked to it. This happens because of a mistake in how the plugin handles errors from the Firebase API. The vulnerability exists in all versions of the plugin up to version 1.8.47.