CVE-2025-3281 — The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includ — CVE Database · The Intelligence Room