A vulnerability was found in WPCOM Member Plugin up to 1.7.16 on WordPress and classified as problematic. Impacted is an unknown function of the component One-Time Password Handler. Executing manipulation can lead to improper restriction of excessive authentication attempts.

This vulnerability is registered as CVE-2025-14002. It is possible to launch the attack remotely. No exploit is available.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.