Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-37987 EUVD-2023-41814GHSA-w43h-737f-6x4q

WordPress YourMembership Single Sign On plugin <= 1.1.3 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in miniOrange YourMembership Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YourMembership Single Sign On: from n/a through 1.1.3.

Affected products

VendorProductAffectedFixed
miniOrange YourMembership Single Sign On ≤ 1.1.3 —

References