CVE-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges

CVSS v3.1

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

46.38% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-269

Published

2025-04-14

Updated

2025-08-27

Proof-of-concept exploits (4)

• https://wpscan.com/vulnerability/2c0f62a1-9510-4f90-a297-17634e6c8b75/
• ubaydev/CVE-2025-25630★ · 2025-03-29
• 0axz-tools/CVE-2025-2563-POC
• dokter69/CVE-2025-2563

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2563.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_user_registration_…

References

• CVE Record
• NVD entry

Related

• CVE-2024-10508
• CVE-2024-10542
• CVE-2024-52475
• CVE-2024-8856
• CVE-2025-2594
• CVE-2026-11551