WordPress plugin
Login with YourMembership – YM SSO Login security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Login with YourMembership – YM SSO Login vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes' ≤1.1.7Update to 1.1.8 | CVE-2025-10648 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings ≤1.1.3Update to 1.1.4 | CVE-2023-37986 | |
| Medium6.5 | Missing Authorization ≤1.1.3Update to 1.1.4 | CVE-2023-37987 |
- Medium5.3YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'
≤1.1.7Update to 1.1.8
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
≤1.1.3Update to 1.1.4
- Medium6.5Missing Authorization
≤1.1.3Update to 1.1.4
Login with YourMembership – YM SSO Login: common questions
Does Login with YourMembership – YM SSO Login have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Login with YourMembership – YM SSO Login: 3 medium. None are known to affect version null.
How do I check which version of Login with YourMembership – YM SSO Login I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Login with YourMembership – YM SSO Login vulnerability?
CVE-2025-10648, published Oct 14, 2025: Login with YourMembership - YM SSO Login <= 1.1.7 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'moym_display_test_attributes'. Severity: Medium (CVSS 5.3).
Is any Login with YourMembership – YM SSO Login vulnerability listed in CISA KEV?
No. None of the known Login with YourMembership – YM SSO Login vulnerabilities is currently listed in the CISA KEV catalog.