A vulnerability has been found in Registration & Login with Mobile Phone Number for WooCommerce Plugin up to 1.3.1 on WordPress and classified as critical. Impacted is the function fma_lwp_set_session_php_fun. The manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2025-10484. The attack is possible to be carried out remotely. No exploit exists.