CVE-2026-114451

The Kadence Memberships WordPress plugin (versions prior to 4.0.6 ) is vulnerable to an unauthenticated table collation downgrade. The flaw exists because the plugin fails to perform proper authorization or CSRF checks before executing a schema-altering database maintenance routine via the 'rcp-a...

CVE-2026-114451 Kadence Memberships < 4.0.6 - Unauthenticated Table Collation Downgrade via 'rcp-action' Parameter

The Membership Plugin WordPress plugin before 4.0.6 does not perform any authorization or CSRF check before running a schema-altering database maintenance routine, allowing unauthenticated users to convert the Membership Plugin WordPress plugin before 4.0.6's own tables to a narrower character se...