Beveiligingsadvies

CVE-2025-2563

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-14 06:00:09

Laatst bijgewerkt 2025-08-27 12:00:20

Toegewezen door WPScan

CVSS-score 8.1

Status PUBLISHED

Beschrijving

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges

← Alle CVE's bekijken Bekijk op cve.org ↗