CVE-2025-10648

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10648", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-17T18:07:31.865Z", "datePublished": "2025-10-15T08:25:50.573Z", "dateUpdated": "2026-04-08T16:38:18.146Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:38:18.146Z"}, "affected": [{"vendor": "cyberlord92", "product": "Login with YourMembership \u2013 YM SSO Login", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.1.7", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The YourMembership Single Sign On \u2013 YM SSO Login plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'moym_display_test_attributes' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to read the profile data of the latest SSO login."}], "title": "Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1bb25412-8f63-4a9d-84bd-44fac59c6eed?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/login-with-yourmembership/trunk/class-moym-sso.php#L88"}, {"url": "https://plugins.trac.wordpress.org/browser/login-with-yourmembership/trunk/class-moym-sso.php#L112"}, {"url": "https://plugins.trac.wordpress.org/changeset/3389623/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "timeline": [{"time": "2025-10-29T20:50:51.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-10-14T19:58:07.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-15T15:13:11.438570Z", "id": "CVE-2025-10648", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T15:25:33.972Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10648", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-15T15:13:11.438570Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T15:25:28.616Z"}}], "cna": {"title": "Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'", "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "cyberlord92", "product": "YourMembership Single Sign On \u2013 YM SSO Login", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.1.7"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-14T19:58:07.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1bb25412-8f63-4a9d-84bd-44fac59c6eed?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/login-with-yourmembership/trunk/class-moym-sso.php#L88"}, {"url": "https://plugins.trac.wordpress.org/browser/login-with-yourmembership/trunk/class-moym-sso.php#L112"}], "descriptions": [{"lang": "en", "value": "The YourMembership Single Sign On \u2013 YM SSO Login plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'moym_display_test_attributes' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to read the profile data of the latest SSO login."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-10-15T08:25:50.573Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10648", "state": "PUBLISHED", "dateUpdated": "2025-10-15T15:25:33.972Z", "dateReserved": "2025-09-17T18:07:31.865Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-15T08:25:50.573Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Login with YourMembership \u2013 YM SSO Login", "vendor": "cyberlord92", "versions": [{"lessThanOrEqual": "1.1.7", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The YourMembership Single Sign On \u2013 YM SSO Login plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'moym_display_test_attributes' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to read the profile data of the latest SSO login."}, {"lang": "es", "value": "El plugin YourMembership Single Sign On - YM SSO Login para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobaci\u00f3n de capacidad faltante en la funci\u00f3n 'moym_display_test_attributes' en todas las versiones hasta la 1.1.7, inclusive. Esto hace posible que atacantes no autenticados lean los datos de perfil del \u00faltimo inicio de sesi\u00f3n SSO."}], "id": "CVE-2025-10648", "lastModified": "2026-10-08T12:10:00.217", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10648", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-15T15:13:11.438570Z", "version": "2.0.3"}}]}, "published": "2025-10-15T09:15:40.953", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/login-with-yourmembership/trunk/class-moym-sso.php#L112"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/login-with-yourmembership/trunk/class-moym-sso.php#L88"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3389623/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1bb25412-8f63-4a9d-84bd-44fac59c6eed?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-27T23:42:56.904050+00:00", "value": {"mitigation_remediation": ["Upgrade the Login with YourMembership \u2013 YM SSO Login plugin to a version newer than\u00a01.1.7 that implements a proper capability check in the moym_display_test_attributes function.", "If an upgrade is not possible, modify the plugin to enforce an authorization check (such as current_user_can('manage_options') or another appropriate capability) before executing moym_display_test_attributes, addressing the CWE-862 access\u2011control flaw.", "As a temporary workaround, block or hide the moym_display_test_attributes endpoint using server configuration (e.g., .htaccess rewrite rules) or by removing the function call from the plugin code."], "summary": {"action": "Apply Patch", "impact": "Unauthorized sensitive information disclosure"}, "threat_synthesis": {"affected_systems": "Affected software is the WordPress plugin Login with YourMembership \u2013 YM SSO Login from vendor cyberlord92. All releases up to and including version\u00a01.1.7 are vulnerable.", "description_and_impact": "The YourMembership Single Sign On \u2013 YM SSO Login plugin contains a missing capability check in the moym_display_test_attributes function. This allows any unauthenticated user to invoke the function and read the profile data of the most recent SSO login, resulting in sensitive user information being disclosed without authorization.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate risk, and the EPSS score of < 1% suggests low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is an unauthenticated HTTP request targeting the moym_display_test_attributes endpoint; the attacker needs no credentials and can simply craft a request to retrieve the sensitive data."}}}}, "created": "2025-10-21T09:41:13.017462+00:00", "updated": "2026-04-27T23:45:15.896423+00:00", "vendors": ["cyberlord92", "cyberlord92$PRODUCT$yourmembership_single_sign_on", "wordpress", "wordpress$PRODUCT$wordpress"]}