CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects WordPress.
CVE
CVE-2025-2594
Severity
HIGH
CVSS
8.1
EPSS
9.06%
WordPress
Original NVD Description
The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID.
Related CVEs
Other vulnerabilities affecting the same vendor(s)