Boletines de Vulnerabilidades

CVE-2025-2563

   
Software afectado WORDPRESS
 
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-2563