CVE-2025-3292: User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationupdateprofiledetails() due to missing validation on the 'userid' user controlled key. This makes it possible for unauthenticated attackers to update other user's passwords, if they have access to the user ID and email.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3292?
CVE-2025-3292 is a medium severity vulnerability due to insecure direct object reference.
How do I fix CVE-2025-3292?
To fix CVE-2025-3292, update the User Registration & Membership plugin to version 4.1.4 or later.
Who is affected by CVE-2025-3292?
Anyone using the User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress prior to version 4.1.4 is affected by CVE-2025-3292.
What causes CVE-2025-3292?
CVE-2025-3292 is caused by missing validation in the user_registration_update_profile_details() function.
Is CVE-2025-3292 an easy vulnerability to exploit?
Yes, CVE-2025-3292 can be easily exploited due to the lack of input validation leading to unauthorized access.