Registration Login With Mobile Phone Number Vulnerabilities

The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.1. This is due to the plugin not properly verifying a users identity prior to authenticating them via the fma_lwp_set_session_php_fun() function. This m...

CVSS:

9.8

Affected:

up to 1.3.1

Fixed in:

1.3.2

Disclosed:

Jan 16, 2026

CVE-2025-10484 on NVD →

The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 1.3.1

Fixed in:

1.3.2

Disclosed:

Dec 30, 2025

CVE-2025-69052 on NVD →