CVE-2025-1475

CRITICAL

WPCOM Member <= 1.7.5 - Unauthenticated Authentication Bypass via User Phone Parameter

Title source: llm
STIX 2.1

Description

The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5. This is due to insufficient verification on the 'user_phone' parameter when logging in. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if SMS login is enabled.

References (3)

Core 3

Scores

CVSS v3 9.8
EPSS 0.0060
EPSS Percentile 43.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-287
Status published
Products (1)
whyun/WPCOM Member < 1.7.5
Published Mar 07, 2025
Tracked Since Feb 18, 2026