CVE-2025-2563 — User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege e…
Published: 2025-04-14 · CVSS: 8.1 · CVSS 3.1
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7