The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/2c0f62a1-9510-4f90-a297-17634e6c8b75/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
29 Apr 2025, 20:32
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | () https://wpscan.com/vulnerability/2c0f62a1-9510-4f90-a297-17634e6c8b75/ - Exploit, Third Party Advisory | |
| First Time |
Wpeverest user Registration \& Membership
Wpeverest |
|
| CPE | cpe:2.3:a:wpeverest:user_registration_\&_membership:*:*:*:*:pro:wordpress:*:* cpe:2.3:a:wpeverest:user_registration_\&_membership:*:*:*:*:free:wordpress:*:* |
14 Apr 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-14 06:15
Updated : 2025-04-29 20:32
NVD link : CVE-2025-2563
Mitre link : CVE-2025-2563
JSON object : View
Products Affected
wpeverest
- user_registration_\&_membership
CWE