Privilege Escalation Vulnerability in EduKart Pro Plugin for WordPress

CVE-2025-13559

What is CVE-2025-13559?

The EduKart Pro plugin for WordPress contains a security flaw that allows unauthenticated users to exploit the registration function. The 'edukart_pro_register_user_front_end' function fails to enforce restrictions on user roles during the registration process. This oversight enables attackers to maliciously register as an 'administrator', potentially granting them full administrative access to the site. By exploiting this vulnerability, attackers can compromise the integrity and security of WordPress installations running EduKart Pro, making it imperative for users to apply security updates promptly.

References