Unrated severityNVD Advisory· Published Apr 14, 2025· Updated Aug 27, 2025
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
CVE-2025-2563
Description
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <4.1.2
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/2c0f62a1-9510-4f90-a297-17634e6c8b75/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.