User Registration & Membership vulnerabilities
We track 6 vulnerabilities in User Registration & Membership products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest User Registration & Membership vulnerabilities
- 8.1 High severity
User Registration & Membership: Improper Privilege Management
The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a paid membership plan is actually valid for that plan before treating a fully discounted order as paid, allowing unauthenticated users to be gra
- 7.5 High severity
User Registration & Membership: Improper Privilege Management
The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate the payment method or the plan submitted with it, allowing any authenticated user such as a subscribe
- 7.2 High severity
User Registration & Membership: Improper Privilege Management
The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign th
- 7.2 High severity
User Registration & Membership: Improper Privilege Management
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management ca
- 7.5 High severity
User Registration & Membership: Improper Access Control
The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled setting when processing registration-form submissions, allowing unauthenticated users to create new accounts even when the administrator has turn
- 8.1 High severity
User Registration & Membership: Improper Privilege Management
The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public registration is one of the tiers allowed by the registration form before assigning that tier's associated user role, allowing un