CVE-2025-13542: CWE-269 Improper Privilege Management in DesignThemes DesignThemes LMS
The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4. This is due to the 'dtlms_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site.
AI Analysis
Technical Summary
CVE-2025-13542 is a critical privilege escalation vulnerability in the DesignThemes LMS WordPress plugin (up to version 1.0.4). The issue stems from the 'dtlms_register_user_front_end' function, which fails to restrict the user roles that can be assigned during registration. This allows unauthenticated attackers to specify the 'administrator' role when registering, thereby gaining administrator privileges on the site. The vulnerability is classified under CWE-269 (Improper Privilege Management) and has a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No patch or vendor advisory is currently available to confirm remediation status.
Potential Impact
Successful exploitation allows unauthenticated attackers to register as administrators on the affected WordPress site, granting them full control. This includes the ability to modify site content, install malicious plugins, exfiltrate data, and disrupt site operations. The impact is complete compromise of confidentiality, integrity, and availability of the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the registration functionality or disable user registration if possible. Monitor for updates from DesignThemes regarding patches or official mitigations. Avoid using affected versions in production environments.
CVE-2025-13542: CWE-269 Improper Privilege Management in DesignThemes DesignThemes LMS
Description
The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4. This is due to the 'dtlms_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site.
CVSS v3.1
Score 9.8critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-13542 is a critical privilege escalation vulnerability in the DesignThemes LMS WordPress plugin (up to version 1.0.4). The issue stems from the 'dtlms_register_user_front_end' function, which fails to restrict the user roles that can be assigned during registration. This allows unauthenticated attackers to specify the 'administrator' role when registering, thereby gaining administrator privileges on the site. The vulnerability is classified under CWE-269 (Improper Privilege Management) and has a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No patch or vendor advisory is currently available to confirm remediation status.
Potential Impact
Successful exploitation allows unauthenticated attackers to register as administrators on the affected WordPress site, granting them full control. This includes the ability to modify site content, install malicious plugins, exfiltrate data, and disrupt site operations. The impact is complete compromise of confidentiality, integrity, and availability of the affected system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the registration functionality or disable user registration if possible. Monitor for updates from DesignThemes regarding patches or official mitigations. Avoid using affected versions in production environments.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2025-11-22T13:49:34.767Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 692f3fe3afa3b8e14e0f8b38
Added to database: 12/02/2025, 19:37:07 UTC
Last enriched: 04/09/2026, 09:35:03 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 256
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.