Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-14
User Registration & Membership - Security Vulnerability (CVE-2026-86406)
The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate the payment method or the plan submitted with it, allowing any authenticated user such as a subscriber to be granted the WordPress role attached to a paid plan without paying for it. Where the site owner has mapped a plan to a privileged role, this leads to privilege escalation up to administrator.
PLUGIN
User Registration & Membership
CVE-2026-86406
Risk Score
Threat Entry
Updated 2026-09-14
User Registration & Membership - Security Vulnerability (CVE-2026-80072)
The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing.
PLUGIN
User Registration & Membership
CVE-2026-80072
Risk Score
Threat Entry
Updated 2026-09-14
User Registration & Membership - Security Vulnerability (CVE-2026-86407)
The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its membership confirmation page owns the account named in the request, nor that any registration or purchase has taken place, allowing unauthenticated users to retrieve another user's email address, profile fields, role and membership order details. Exploitation requires the site owner to have added a user smart tag to that page's configurable message, which the shipped default does not contain.
PLUGIN
User Registration & Membership
CVE-2026-86407
Risk Score
Threat Entry
Updated 2026-09-14
User Registration & Membership - Security Vulnerability (CVE-2026-80071)
The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign themselves an arbitrary role and escalate their privileges to Administrator.
PLUGIN
User Registration & Membership
CVE-2026-80071
Risk Score
Threat Entry
Updated 2026-08-28
User Registration & Membership - Broken Access Control (CVE-2026-79996)
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.
PLUGIN
User Registration & Membership
CVE-2026-79996
Risk Score
Threat Entry
Updated 2026-08-28
User Registration & Membership - Security Vulnerability (CVE-2026-79995)
The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an administrator's.
PLUGIN
User Registration & Membership
CVE-2026-79995
Risk Score
Threat Entry
Updated 2026-08-26
User Registration & Membership - Security Vulnerability (CVE-2026-16736)
The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled setting when processing registration-form submissions, allowing unauthenticated users to create new accounts even when the administrator has turned off open registration.
PLUGIN
User Registration & Membership
CVE-2026-16736
Risk Score
Threat Entry
Updated 2026-07-17
User Registration & Membership - Improper Input Validation (CVE-2026-11961)
The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public registration is one of the tiers allowed by the registration form before assigning that tier's associated user role, allowing unauthenticated users to register into an arbitrary published membership tier and obtain its role — up to administrator when such a tier exists.
PLUGIN
User Registration & Membership
CVE-2026-11961
Risk Score
Threat Entry
Updated 2026-07-17
User Registration & Membership - Broken Access Control (CVE-2026-11966)
The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts on a caller-supplied user identifier, allowing unauthenticated attackers to delete recently-registered, payment-pending user accounts.
PLUGIN
User Registration & Membership
CVE-2026-11966
Risk Score
Threat Entry
Updated 2026-07-13
User Registration & Membership - Security Vulnerability (CVE-2026-11964)
The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved event and activate a paid membership subscription without completing a real payment.
PLUGIN
User Registration & Membership
CVE-2026-11964
Risk Score
Threat Entry
Updated 2026-07-13
User Registration & Membership - Security Vulnerability (CVE-2026-11963)
The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user's WordPress role and membership tier.
PLUGIN
User Registration & Membership
CVE-2026-11963
Risk Score
Threat Entry
Updated 2026-07-02
User Registration & Membership - Security Vulnerability (CVE-2026-11965)
The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscription, allowing unauthenticated users (after self-registering an account through the open registration flow) to obtain an active subscription on any paid plan without paying and access the gated content.
PLUGIN
User Registration & Membership
CVE-2026-11965
Risk Score
Threat Entry
Updated 2026-06-17
User Registration & Membership - Broken Access Control (CVE-2026-6145)
The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5. This is due to the is_admin_creation_process() method relying solely on the presence of action=createuser in the $_REQUEST superglobal without performing any authentication or capability check. This makes it possible for unauthenticated attackers to bypass the admin approval requirement when registering new accounts via the fallback submission path.
PLUGIN
User Registration & Membership
CVE-2026-6145
Risk Score
Threat Entry
Updated 2026-06-17
User Registration Membership - Broken Access Control (CVE-2026-3601)
The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `embed_form_action()` function in all versions up to, and including, 5.1.4. This makes it possible for authenticated attackers, with Contributor-level access and above, to append shortcode content to arbitrary pages they do not own or have permission to edit.
PLUGIN
User Registration Membership
CVE-2026-3601
Risk Score
Threat Entry
Updated 2026-06-17
User Registration & Membership - Open Redirect (CVE-2026-6203)
The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the 'redirect_to_on_logout' GET parameter before redirecting users. The `redirect_to_on_logout` GET parameter is passed directly to WordPress's `wp_redirect()` function instead of the domain-restricted `wp_safe_redirect()`. While `esc_url_raw()` is applied to sanitize malformed URLs, it does not restrict the redirect destination to the local domain, allowing an attacker to craft a specially formed link that redirects users to potentially malicious external URLs…
PLUGIN
User Registration & Membership
CVE-2026-6203
Risk Score
Threat Entry
Updated 2026-06-17
User Registration & Membership - Broken Access Control (CVE-2026-4056)
The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API endpoints in versions 5.0.1 through 5.1.4. This is due to the `check_permissions()` method only checking for `edit_posts` capability instead of an administrator-level capability. This makes it possible for authenticated attackers, with Contributor-level access and above, to list, create, modify, toggle, duplicate, and delete site-wide content restriction rules, potentially exposing restricted content or denying legitimate user access.
PLUGIN
User Registration & Membership
CVE-2026-4056
Risk Score
Threat Entry
Updated 2026-06-17
User Registration Membership - Security Vulnerability (CVE-2026-2356)
The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2 via the 'register_member' function, due to missing validation on the 'member_id' user controlled key. This makes it possible for unauthenticated attackers to delete arbitrary user accounts that newly registered on the site who has the 'urm_user_just_created' user meta set.
PLUGIN
User Registration Membership
CVE-2026-2356
Risk Score
Threat Entry
Updated 2026-06-17
User Registration Membership - Authentication Bypass (CVE-2026-1779)
The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthenticated attackers to log in a newly registered user on the site who has the 'urm_user_just_created' user meta set.
PLUGIN
User Registration Membership
CVE-2026-1779
Risk Score
Threat Entry
Updated 2026-06-17
User Registration Membership - SQL Injection (CVE-2025-9085)
The User Registration & Membership plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in version 4.3.0. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
PLUGIN
User Registration Membership
CVE-2025-9085
Risk Score
Threat Entry
Updated 2026-06-17
User Registration Membership - Security Vulnerability (CVE-2025-3281)
The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.1 via the create_stripe_subscription() function, due to missing validation on the 'member_id' user controlled key. This makes it possible for unauthenticated attackers to delete arbitrary user accounts that have registered through the plugin.
PLUGIN
User Registration Membership
CVE-2025-3281
Risk Score