WordPress Plugin Vulnerabilities

Membership For WooCommerce < 3.0.4 - Unauthenticated Insecure Direct Object Reference

Description

The Membership For WooCommerce – WordPress Membership Plugin, Restrict Content, Build Online Communities, Paywall & Content Dripping plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.3 due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Plugin icon
membership-for-woocommerce
Fixed in 3.0.4

References

CVE
CVE-2025-67909
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/f3c50b00-0b90-45f3-a392-be4e6406a865

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
timomangcut
Verified
No
WPVDB ID
da37ab4a-a143-4c61-a2bc-a502a68d75b2

Timeline

Publicly Published
2025-12-24 (about 7 months ago)
Added
2026-01-05 (about 6 months ago)
Last Updated
2026-01-05 (about 6 months ago)

Other

Published
Title
Published
2026-06-05
Title
Klamra Paycal for Aspaclaria < 1.1.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter
Published
2025-05-05
Title
User Registration & Membership – Custom Registration Form, Login Form, and User Profile < 4.2.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
Published
2024-02-26
Title
User Shortcodes Plus <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via user_meta Shortcode
Published
2024-11-27
Title
Primary Addon for Elementor < 1.6.3 - Authenticated (Contributor+) Post Disclosure
Published
2025-04-11
Title
User Registration & Membership – Custom Registration Form, Login Form, and User Profile < 4.1.4 - Insecure Direct Object Reference to Unauthenticated Membership Modification