CVE-2025-13538 is a privilege escalation vulnerability in the FindAll Listing plugin for WordPress, affecting all versions up to 1.0.5. The vulnerability is due to improper privilege management in the 'findall_listing_user_registration_additional_params' function, which fails to restrict user roles during registration. This allows unauthenticated attackers to specify the 'administrator' role when registering, thereby gaining administrative privileges. Exploitation is contingent on the FindAll Membership plugin being activated, as it manages user registrations. The vulnerability has a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting its critical impact on confidentiality, integrity, and availability. No patch or remediation details are currently provided by the vendor.

Successful exploitation grants unauthenticated attackers full administrator access to the affected WordPress site, compromising confidentiality, integrity, and availability. This could lead to complete site takeover, data theft, defacement, or further malicious activity. The vulnerability requires the FindAll Membership plugin to be active, limiting the attack surface to sites using both plugins.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, disable the FindAll Membership plugin or restrict user registration functionality to trusted users only. Monitor for updates from Elated Themes regarding an official fix. Avoid enabling user registration if not necessary.