CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2025/10/15 12:00 a.m.•2 views

CVE-2025-10648: Missing Authorization

The YourMembership Single Sign On – YM SSO Login plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'moymdisplaytestattributes' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to rea...

5.3CVSS5.7AI score0.00304EPSS

SaveExploits0References1

NVD•added 2023/09/01 12:15 p.m.•32 views

CVE-2023-37986

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin = 1.1.3 versions...

5.9CVSS5.4AI score0.00362EPSS

SaveExploits0References1

CVE•added 2023/09/01 11:09 a.m.•54 views

CVE-2023-37986

CVE-2023-37986 affects the miniOrange YourMembership Single Sign On (YM SSO) Login WordPress plugin, versions

5.9CVSS5AI score0.00362EPSS

SaveExploits0References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2023/09/01 12:00 a.m.•1 views

CVE-2023-37986: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin = 1.1.3 versions...

5.9CVSS5.6AI score0.00362EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by