CVE-2026-96660

The User Registration & Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.8 . The root cause is insufficient input sanitization and output escaping within the checkbox field value. Specifically, the nopriv AJAX action user_r...