Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-110527 The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during…

Description

The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP User Manager 2.9 2.9 → < 2.9.20 2.9.20

Autres CVE de WP User Manager

Les 2 CVE de WP User Manager →
CVE-2026-110523 The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force… 8.1 Élevée
Suivre cette CVE