Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-2594. PoCs published by Mohammed Idrees Banyamer, ubaydev.
AI-analyzed exploit summary This exploit bypasses authentication in WordPress User Registration & Membership Plugin by manipulating the 'user_registration_membership_confirm_payment' action with a crafted payload. It requires a valid nonce and member ID to achieve unauthorized access.
Description
The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any user, including administrators, by simply using the target account's user ID.
Exploits (2)
This exploit bypasses authentication in WordPress User Registration & Membership Plugin by manipulating the 'user_registration_membership_confirm_payment' action with a crafted payload. It requires a valid nonce and member ID to achieve unauthorized access.
This repository provides a detailed writeup and PoC for CVE-2025-2594, an authentication bypass vulnerability in the User Registration & Membership WordPress plugin (versions <= 4.1.2). The exploit leverages incorrect authentication in the 'confirm_payment()' function to log in as any existing user, including administrators, by manipulating the 'member_id' parameter.
References (1)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H