CVE-2025-2594 — The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when the Membership Addon is enabled, allowing attackers to authenticate as any u — CVE Database · The Intelligence Room