CVE-2025-2594

CVE-2025-2594 User Registration & Membership = 4.1.2 - 인증 우회 면책 조항! 이 CVECommon Vulnerabilities and Exposures 분석 글에 제시된 정보는 교육 및 정보 제공 목적으로만 제공됩니다. 제공된 세부 정보는 공개적으로 이용 가능한 자료, 연구 및 작성자가 수행한 분석을 기반으로 합니다. 본 내용은 해킹, 악용 또는 시스템에 대한 무단 접근을 포함한 불법 활동을 조장하거나 권장하기 위한 것이 아닙니다. 작성자는 제시된 정보의 오용에 대해 어떠한 책임도 ...

CVE-2025-2563

CVE-2025-2563 User Registration & Membership WordPress 플러그인 4.1.2 이전 버전에서는 Membership Addon이 활성화된 경우 사용자가 자신의 계정 역할을 설정하는 것을 막지 않아 권한 상승 문제가 발생하며, 인증되지 않은 사용자가 관리자 권한을 획득할 수 있습니다. 🔴 취약점 개요 CVE-2025-2563 — Membership Addon 역할 주입을 통한 인증되지 않은 권한 상승 필드| 세부 정보 ---|--- CVE ID| CVE-2025-2563 심각도| 높음 —...

Exploit for CVE-2025-2563

CVE-2025-2563 The User Registration & Membership WordPress...

EUVD-2025-12286

Malicious code in bioql PyPI...

CVE-2025-2594

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID...

CVE-2025-2594

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID...

CVE-2025-2594 User Registration & Membership < 4.1.3 - Authentication Bypass

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID...

CVE-2025-2594

The User Registration & Membership WordPress plugin (versions 4.1.2 and below ) is vulnerable to an authentication bypass in the confirm_payment() function when the Membership Addon is enabled. This flaw occurs because the plugin fails to properly validate data in an AJAX action , allowing unauth...

WordPress plugin User Registration & Membership 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-2594: Undefined Security Weakness

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID...

CVE-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

CVE-2025-2563

The User Registration & Membership WordPress plugin (versions before 4.1.2 ) contains a critical unauthenticated privilege escalation vulnerability (CVE-2025-2563 ). When the Membership Addon is active, the prepare_members_data() function fails to enforce server-side role restrictions. An attacke...

CVE-2025-2563: Undefined Security Weakness

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

VulnCheck KEV: CVE-2025-2563

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges...

WordPress iThemes Exchange Membership Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce websites using the WordPress content management system. membership Add-on is one of the plugins for website membership functionality. A cross-site scripting vulnerability exists in the WordPress iThemes Exchange Membership Add-on...