CVE-2026-15930

creationtimestamp| type| source ---|---|--- 2026-08-03 17:54:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms72wqlg2t2h...

CVE-2026-15930

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data including the email...