CVE-2025-2563
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
Analysis
The User Registration & Membership WordPress plugin before version 4.1.2 fails to prevent users from setting their account role when the Membership Addon is enabled. This allows unauthenticated users to register with administrator privileges, bypassing all intended access controls.
Technical Context
The plugin's registration form processing does not properly validate the user role parameter when the Membership Addon is enabled. An attacker can manipulate the registration request to set their role to 'administrator' instead of the intended default role. The server-side validation fails to restrict role assignment, allowing the elevated account creation.
Affected Products
['User Registration & Membership < 4.1.2', 'User Registration Membership Addon (when enabled)']
Remediation
Update to version 4.1.2 or later. Audit the WordPress users table for recently created accounts with administrator role. If unauthorized admins are found, delete them and change all admin passwords. Review registration form for proper role enforcement.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today