CVE-2025-13542

CVE-2025-13542 affects the DesignThemes LMS plugin for WordPress (versions up to and including 1.0.4). The root cause is the dtlms_register_user_front_end function not restricting which user roles a new registration can assign, allowing unauthenticated attackers to supply the administrator role a...