OTP Login With Phone Number, OTP Verification

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 82% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

16 of the last 27 four- and five-star reviews came from accounts created within a month of posting the review, and 7 of those landed between 2023-08-23 and 2023-09-06.

Registering a wp.org account just to leave a review is common and often entirely legitimate. The share here is unusually high for the sample, so it's worth keeping in mind while reading the reviews.

1. ★★★★★ v1988

   2mo ago

   Big mistake buying this plugin. Paid for pro, support went silent. It’s full of bugs and completely unusable. No response from anyone. Total scam. do not pay for pro version guys This topic was modified 2 weeks, 2 days ago by v1988. Reason: total scam

   Read on wp.org ↗
2. ★★★★★ webmaster1105

   10mo ago

   Awesome plugin. I was able to set it up in a few minutes. If you face any issues, you can chat with author from the plugin setting page of your website itself. With Firebase, I got a free limit of 1000 sms per day. So it’s working great for my website now. Looking forward to buy the paid version in future, jsut to support the author.

   Read on wp.org ↗
3. ★★★★★ Sajjad Nazari

   10mo ago

   It was a grate experience for to using good plugin and their support team was good at it.

   Read on wp.org ↗
4. ★★★★★ pixer

   11mo ago

   1. Shows ads. 2. Shows developers real face in my admin dashboard 😐 3. The core basic functionality (connection to KaveNegar SMS service provider) is locked behind Pro version. Almost all SMS gateways are locked behind a paywall. 4. “Enable usage tracking” option checked by default (without users knowladge). This topic was modified 9 months ago by pixer.

   Read on wp.org ↗
5. ★★★★★ badraldossari

   1.1y ago

   The plugin is great, but there are some compatibility issues with the WoodMart theme.Also, when the “Abandoned Cart” feature is enabled, it causes problems. I hope these issues will be fixed in future updates. Additionally, I suggest adding more login form templates instead of relying on just one.

   Read on wp.org ↗
6. ★★★★★ ludmilasv

   1.2y ago

   Thanks a lot, your plugin saved me so much time for development!One small bug: the shortcode renders 5 forms, and all of them have a field with the same id. So, I have a warning in console: Found 5 elements with non-unique id #security.

   Read on wp.org ↗
7. ★★★★★ nikhiljdhv

   1.3y ago

   So I recently migrated one of my clients website from Shopify to Woo and they needed a otp based login. All other options seemed a little too much and I wanted something very straightforward. Add the phone number, get an otp and login. These guys do just that. No fuss! And the best part is, the customer support was spot on. I had trouble syncing the old Shopify customers with this app but the support team guided me very efficiently and got the issue resolved in no time. I highly recommend this plugin and I’m soon going to opt for the paid version.

   Read on wp.org ↗
8. ★★★★★ ehsan

   1.5y ago

   support india and Saudi Arabia and another country and the pro version of this plugin is much cheaper than other plugins

   Read on wp.org ↗

15 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Critical · 9.8 OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute Force ↗
   2026-08-06 CVE-2026-65570 Authentication Bypass Using an Alternate Path or Channel Affects <= 1.8.70 Patched in 1.8.71
2. Critical · 9.8 OTP Login With Phone Number, OTP Verification <= 1.8.60 - Unauthenticated Authentication Bypass via Firebase OTP Verification ↗
   2026-05-28 CVE-2026-3655 Improper Authentication Affects 1.8.50 - 1.8.60 Patched in 1.8.61
3. High · 8.1 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass ↗
   2025-08-14 CVE-2025-8342 Missing Authorization Affects <= 1.8.47 Patched in 1.8.48
4. High · 8.8 Login with phone number <= 1.7.49 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation ↗
   2024-09-14 CVE-2024-6482 Improper Privilege Management Affects <= 1.7.49 Patched in 1.7.50
5. Medium · 4.4 Login with phone number <= 1.7.35 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2024-06-28 CVE-2024-37429 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.35 Patched in 1.7.36
6. High · 8.1 Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism ↗
   2024-06-18 CVE-2024-6125 Weak Password Recovery Mechanism for Forgotten Password Affects <= 1.7.34 Patched in 1.7.35
7. Critical · 9.8 Login with phone number <= 1.7.26 - Authentication Bypass due to Missing Empty Value Check ↗
   2024-05-28 CVE-2024-5150 Authentication Bypass Using an Alternate Path or Channel Affects <= 1.7.26 Patched in 1.7.27
8. Medium · 4.3 Login with phone number <= 1.7.18 - Missing Authorization ↗
   2024-05-03 CVE-2024-34371 Missing Authorization Affects <= 1.7.18 Patched in 1.7.20
9. Medium · 5.3 Login with phone number <= 1.6.93 - Missing Authorization ↗
   2024-04-22 CVE-2024-32832 Missing Authorization Affects <= 1.6.93 Patched in 1.6.94
10. High · 8.8 Login with phone number <= 1.7.16 - Unauthorized Account Password Change to Privilege Escalation ↗
    2024-04-15 CVE-2024-32507 Authorization Bypass Through User-Controlled Key Affects <= 1.7.16 Patched in 1.7.17
11. Medium · 4.3 Login with phone number <= 1.6.93 - Cross-Site Request Forgery ↗
    2024-04-10 CVE-2024-31424 Cross-Site Request Forgery (CSRF) Affects <= 1.6.93 Patched in 1.6.94
12. High · 8.8 Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change ↗
    2023-09-12 CVE-2023-4916 Cross-Site Request Forgery (CSRF) Affects <= 1.5.6 Patched in 1.5.7
13. Medium · 6.1 Login with phone number <= 1.4.2 - Reflected Cross-Site Scripting ↗
    2023-01-12 CVE-2023-23492 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.4.2 Patched in 1.4.2
14. Medium · 5.5 Login with phone number <= 1.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-07-05 CVE-2022-0598 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.7 Patched in 1.3.8
15. Medium · 6.5 Login with phone number <= 1.3.6 - Unauthenticated Remote Plugin Deletion ↗
    2022-02-16 CVE-2022-0593 External Control of File Name or Path Affects < 1.3.7 Patched in 1.3.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 13 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-29 1K+ → 900+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Email OTP Authenticator – Login, Register & 2FA 100+ installs · 4.5★ · 2 shared tags A
• Temporary Login Without Password 100K+ installs · 5.0★ · 1 shared tag A
• Login & Register Forms – Popup, Slider, Profile & WooCommerce 40K+ installs · 4.7★ · 1 shared tag A
• Temporary Login 40K+ installs · 4.0★ · 1 shared tag C
• DoLogin Security 7K+ installs · 4.2★ · 1 shared tag A
• WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce 7K+ installs · 4.1★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for OTP Login With Phone Number, OTP Verification into a readme, a review or a deck. It updates itself.

OTP Login With Phone Number, OTP Verification: 900+ active installs, 4.9★ (81 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/login-with-phone-number