CVE-2026-109873 | BDVDB-2026-404766 Detail

User Registration & Membership

Description#

The User Registration & Membership WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction when a registration is submitted without a membership selection, allowing unauthenticated users to create an account on a payment-gated registration form and log in without completing payment.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-287 Improper Authentication

References#

https://wpscan.com/vulnerability/4cce0bb5-eb8e-4452-a6d1-6c408344bc7f/

Exploit#

https://wpscan.com/vulnerability/4cce0bb5-eb8e-4452-a6d1-6c408344bc7f/

History#

Version 12026-11-11Record published in the CVE List.