Authentication Bypass Vulnerability in Login Me Now Plugin for WordPress

CVE-2025-1717

What is CVE-2025-1717?

The Login Me Now plugin for WordPress has a vulnerability that allows unauthenticated attackers to bypass authentication, enabling them to log in as any existing user, including administrators. This issue arises from insecure authentication mechanisms that rely on arbitrary transient names within the 'AutoLogin::listen()' function. Although the plugin is not inherently vulnerable, its configuration can expose it to risk if transient names and values from other software are used.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References