CVE-2025-3292

creationtimestamp| type| source ---|---|--- 2025-04-12 06:51:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11550 2025-04-12 10:50:26+00:00| seen| https://t.me/cvedetector/22794...

CVE-2025-3292

CVE-2025-3292 concerns the WordPress plugin “User Registration & Membership – Custom Registration Form, Login Form, and User Profile.” It is vulnerable to Insecure Direct Object Reference due to missing validation on the user_id parameter, enabling update of other users’ passwords when an attacke...

WordPress User Registration plugin <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ User Password Update vulnerability discovered by wesley wcraft in WordPress Plugin User Registration versions = 4.1.3...