CVE-2025-2594 User Registration & Membership < 4.1.3 - Authentication Bypass
Attackers can authenticate as any user, including administrators, by exploiting an AJAX validation flaw in the Membership Addon.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-2594?
CVE-2025-2594 is a high-severity authentication bypass vulnerability in Unknown User Registration & Membership, published on 22 Apr 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID.
Which versions are affected by CVE-2025-2594?
It affects 1 product.
Products include Wpeverest User Registration \& Membership.
How do I fix CVE-2025-2594?
No fix has been published for CVE-2025-2594 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-2594 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-2594 exists.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Other vulnerabilities in Unknown User Registration & Membership
- CVE-2025-2563 User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
- CVE-2023-27459 WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
- CVE-2025-39400 WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-30899 WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-3282 Missing authorization in User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Sources
Also known as GHSA-hmpr-r93w-5j44.