| CVE-2026-80072 |
The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login…
|
4.7
Medium
|
Sep 13, 2026 |
| CVE-2026-86406 |
The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a…
|
7.5
High
|
Sep 13, 2026 |
| CVE-2026-86407 |
The User Registration & Membership WordPress plugin before 5.2.8 does not verify that the visitor requesting its…
|
3.7
Low
|
Sep 13, 2026 |
| CVE-2026-80071 |
The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership…
|
7.2
High
|
Sep 13, 2026 |
| CVE-2026-79995 |
The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email…
|
4.3
Medium
|
Aug 28, 2026 |
| CVE-2026-79996 |
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its…
|
7.2
High
|
Aug 28, 2026 |
| CVE-2026-16736 |
The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2026-11961 |
The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted…
|
8.1
High
|
Jul 17, 2026 |
| CVE-2026-11966 |
The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for…
|
5.3
Medium
|
Jul 17, 2026 |
| CVE-2026-11963 |
The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a…
|
8.1
High
|
Jul 13, 2026 |
| CVE-2026-11964 |
The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming…
|
9.1
Critical
|
Jul 13, 2026 |
| CVE-2026-11965 |
The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before…
|
6.5
Medium
|
Jul 2, 2026 |
| CVE-2025-2594 |
The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action…
|
8.1
High
|
Apr 22, 2025 |
| CVE-2025-2563 |
The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role…
|
8.1
High
|
Apr 14, 2025 |