Executive brief
MemberDash is a WordPress plugin that enables membership and course management for LearnDash sites. An unauthenticated attacker can exploit a vulnerability in the user registration process to change the password of any WordPress user, including administrators, without any verification or notification to the victim. This allows complete account takeover and unauthorized access to sensitive site functions.
Technical details
The MemberDash plugin is vulnerable to Insecure Direct Object Reference (IDOR) in its registration functionality, caused by missing validation on the user-controlled 'id' parameter. An unauthenticated attacker can supply an arbitrary user ID during registration and directly modify that user's password without authentication or authorization checks. The vulnerability affects all versions up to and including 1.8.5. No patch or mitigation is mentioned in the advisory, requiring users to await a vendor fix or disable the plugin.
Affected products
- MemberDash MemberDash up to and including 1.8.5
Timeline
- 2026-09-06: disclosed