Email OTP Authenticator
- Software type
- Authentication
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Email OTP Authenticator recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Email OTP Authenticator and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-13591Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account DiscoveryCVE-2025-13909Cross-tenant PII disclosure caused by tenant-isolation failure in WSO2 Identity ServerCVE-2024-0391Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-13591Username Enumeration via Authentication Endpoint in WSO2 Identity Server Allows User Account Discovery | Exploitation statusNot exploited | FixYes | Published10/19/2026 | SeverityMedium |
CVE-2025-13909Cross-tenant PII disclosure caused by tenant-isolation failure in WSO2 Identity Server | Exploitation statusNot exploited | FixYes | Published08/06/2026 | SeverityMedium |
CVE-2024-0391Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery | Exploitation statusNot exploited | FixYes | Published05/11/2026 | SeverityMedium |
3 Results | Page 1 of 1