CVE-2026-10820

CVE-2026-10820 affects the WordPress plugin family “Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content” up to version 4.16.17. The root cause is lack of ownership verification when a subscription action is performed, allowing any authenticated u...