CVE-2025-2594: user registration — Exploit

Description

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID.

Is your site exposed to CVE-2025-2594?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
wpeverest	user_registration_\&_membership	< 4.1.3
wpeverest	user_registration_\&_membership	< 5.1.3

References

Exploits

https://wpscan.com/vulnerability/1c1be47a-d5c0-4ac1-b9fd-475b382a7d8f/

Frequently Asked Questions

What is CVE-2025-2594? +

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID. It has a CVSS v3.1 base score of 8.1 (HIGH).

How severe is CVE-2025-2594? +

CVE-2025-2594 has a CVSS v3.1 score of 8.1 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-2594? +

CVE-2025-2594 affects products from wpeverest, specifically: user_registration_\&_membership. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-2594? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-60210 9.8

Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing everest-forms-frontend-listing allows Object Injection.This issue affects Everest Forms …

CVE-2025-3439 9.8

The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable …

CVE-2025-1128 9.8

The Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable …

CVE-2025-2563 8.1

The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the …

CVE-2025-5927 7.5

The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in …

CVE-2023-27459 7.4

Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1.

CVE-2025-2594