PoC Index85,100 CVEs with PoCs

CVE-2025-2594

User Registration & Membership < 4.1.3 - Authentication Bypass

HIGH 8.1EPSS 9.5%

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID.

Affected
User Registration & Membership
CVSS v3.1 CNA
8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
9.52% chance of exploitation in the next 30 days, 95th percentile
Published
2025-04-22
Updated
2025-08-27

Proof-of-concept exploits (2)

ExploitDB entries (1)

Security advisories

References

Related