CVE-2026-11966

The User Registration & Membership WordPress plugin, in versions prior to 5.2.3 , is vulnerable to an authorization bypass. The plugin fails to perform a capability check for unauthenticated callers on specific membership payment actions and processes a caller-supplied user identifier . This flaw...