Privilege Escalation Vulnerability in EduKart Pro Plugin for WordPress

CVE-2025-13559

What is CVE-2025-13559?

The EduKart Pro plugin for WordPress contains a security flaw that allows unauthenticated users to exploit the registration function. The 'edukart_pro_register_user_front_end' function fails to enforce restrictions on user roles during the registration process. This oversight enables attackers to maliciously register as an 'administrator', potentially granting them full administrative access to the site. By exploiting this vulnerability, attackers can compromise the integrity and security of WordPress installations running EduKart Pro, making it imperative for users to apply security updates promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References