A vulnerability has been found in Registration & Login with Mobile Phone Number for WooCommerce Plugin up to 1.3.1 on WordPress and classified as critical. Impacted is the function
fma_lwp_set_session_php_fun. The manipulation leads to improper authentication.
This vulnerability is uniquely identified as CVE-2025-10484. The attack is possible to be carried out remotely. No exploit exists.