Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: User Registration & Membership 5.2.3 Clear all filters
TI-2026-10311 CVE-2026-11966 · GHSA-2wp6-4gxm-vfvx

User Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription Handler

Priority MEDIUM 63

The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts on a caller-supplied user identifier, all…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-07-17 Fixed in 5.2.3 CWE-639
TI-2026-10306 CVE-2026-11961 · GHSA-55mp-h634-7h25

User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID

Priority LOW 37

The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public registration is one of the tiers allowed by the registration form before assigning that…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00383 Published 2026-07-17 Fixed in 5.2.3 CWE-269