CVE-2026-109870 | BDVDB-2026-404764 Detail

Description#

The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a paid membership plan is actually valid for that plan before treating a fully discounted order as paid, allowing unauthenticated users to be granted the role mapped to a paid plan without paying for it, which can lead to privilege escalation up to administrator where a plan is mapped to a privileged role.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-11-11Record published in the CVE List.