CVE-2025-2563
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
Reserved 2025-03-20 | Published 2025-04-14 | Updated 2025-04-14 | Assigner WPScanCWE-269 Improper Privilege Management
wesley (wcraft)
WPScan
wpscan.com/...rability/2c0f62a1-9510-4f90-a297-17634e6c8b75/
Support options
