CVE-2025-2594

This exploit bypasses authentication in WordPress User Registration & Membership Plugin by manipulating the 'user_registration_membership_confirm_payment' action with a crafted payload. It requires a valid nonce and member ID to achieve unauthorized access.

This repository provides a detailed writeup and PoC for CVE-2025-2594, an authentication bypass vulnerability in the User Registration & Membership WordPress plugin (versions <= 4.1.2). The exploit leverages incorrect authentication in the 'confirm_payment()' function to log in as any existing user, including administrators, by manipulating the 'member_id' parameter.