CVE-2025-1564

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1564", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-02-21T17:09:38.984Z", "datePublished": "2025-03-01T07:24:05.077Z", "dateUpdated": "2026-04-08T17:20:14.929Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:20:14.929Z"}, "affected": [{"vendor": "Select-Themes", "product": "SetSail Membership", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log in as any user, including administrators and take over access to their account."}], "title": "SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2c2385e-0d1e-435a-9b82-972964084148?source=cve"}, {"url": "https://themeforest.net/item/setsail-travel-agency-theme/22832625"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel", "cweId": "CWE-288", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "timeline": [{"time": "2025-02-28T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-03T20:55:25.303357Z", "id": "CVE-2025-1564", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T20:56:46.796Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1564", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-03T20:55:25.303357Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T20:55:26.546Z"}}], "cna": {"title": "SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover", "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Select-Themes", "product": "SetSail Membership", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.0.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-02-28T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2c2385e-0d1e-435a-9b82-972964084148?source=cve"}, {"url": "https://themeforest.net/item/setsail-travel-agency-theme/22832625"}], "descriptions": [{"lang": "en", "value": "The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log in as any user, including administrators and take over access to their account."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:20:14.929Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1564", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:20:14.929Z", "dateReserved": "2025-02-21T17:09:38.984Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-03-01T07:24:05.077Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "SetSail Membership", "vendor": "Select-Themes", "versions": [{"lessThanOrEqual": "1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log in as any user, including administrators and take over access to their account."}, {"lang": "es", "value": "El complemento SetSail Membership para WordPress es vulnerable en todas las versiones hasta la 1.0.3 incluida. Esto se debe a que el complemento no verifica correctamente la identidad de los usuarios a trav\u00e9s del inicio de sesi\u00f3n con redes sociales. Esto permite que atacantes no autenticados inicien sesi\u00f3n como cualquier usuario, incluidos los administradores, y obtengan acceso a su cuenta."}], "id": "CVE-2025-1564", "lastModified": "2026-06-17T08:39:22.527", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-1564", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-03-03T20:55:25.303357Z", "version": "2.0.3"}}]}, "published": "2025-03-01T08:15:34.007", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/setsail-travel-agency-theme/22832625"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2c2385e-0d1e-435a-9b82-972964084148?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-288"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T22:09:06.989472+00:00", "value": {"mitigation_remediation": ["Upgrade the SetSail Membership plugin to the latest version that includes the authentication fix, or replace it with an alternative plugin.", "Disable the social login functionality until the plugin is updated to prevent unauthenticated access via this path.", "Review all user accounts for suspicious changes and reset passwords for accounts that may have been compromised."], "summary": {"action": "Apply Patch", "impact": "Authentication Bypass to Account Takeover"}, "threat_synthesis": {"affected_systems": "All installations of the Select\u2011Themes SetSail Membership plugin up to and including version\u202f1.0.3 are vulnerable. The affected product is the WordPress plugin sold under the SetSail Membership name.", "description_and_impact": "The SetSail Membership plugin for WordPress fails to properly verify a user's identity through its social login feature, allowing any unauthenticated user to authenticate as any account, including administrators. This authentication failure permits an attacker to gain full control of the WordPress site, access sensitive data, modify content or settings, and potentially compromise other connected systems. The weakness matches CWE\u2011288, reflecting improper authentication handling.", "risk_and_exploitability": "The CVSS score of 9.8 classifies this as a critical vulnerability, indicating that remote authentication bypass could lead to complete system takeover. Although the EPSS score is below 1\u202f% and the vulnerability is not listed in the CISA KEV catalog, based on the description it is inferred that the attack vector is through the publicly accessible social login endpoint, making exploitation straightforward for an unauthenticated attacker. Because authentication is bypassed, all credentials are effectively compromised if the attacker can choose a target account."}}}}, "created": "2025-07-13T11:07:23.059838+00:00", "updated": "2026-04-21T22:15:45.903630+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}