PT-2025-42301
CVE-2025-10648
·
Published
2025-10-14
·
Updated
2025-10-15
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
YourMembership Single Sign On – YM SSO Login plugin for WordPress versions up to and including 1.1.7
Description
The YourMembership Single Sign On – YM SSO Login plugin for WordPress has a flaw that allows unauthorized access to data. A missing capability check within the
moym display test attributes() function permits unauthenticated attackers to view profile data from the most recent SSO login.Recommendations
Update the YourMembership Single Sign On – YM SSO Login plugin to a version later than 1.1.7.
Found an issue in the description? Have something to add? Feel free to write us 👾