UR
Product
User Registration & Membership
14
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 4Low 1
Watch
Add User Registration & Membership to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-11964 | 9.1 | Jul 13 | User Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation Affected: before 5.2.2 |
| CVE-2026-11961 | 8.1 | Jul 17 | User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID Affected: before 5.2.3 |
| CVE-2026-11963 | 8.1 | Jul 13 | User Registration & Membership < 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDOR Affected: before 5.2.2 |
| CVE-2025-2594 | 8.1 | Apr 22 | User Registration & Membership < 4.1.3 - Authentication Bypass Affected: before 4.1.3 |
| CVE-2025-2563 | 8.1 | Apr 14 | User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation Affected: before 4.1.2 |
| CVE-2026-86406 | 7.5 | Sep 13 | User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase Affected: 4.4.6 before 5.2.8 |
| CVE-2026-16736 | 7.5 | Aug 5 | User Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration Disabled Affected: before 5.2.6 |
| CVE-2026-80071 | 7.2 | Sep 13 | User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator Affected: before 5.2.8 |
| CVE-2026-79996 | 7.2 | Aug 28 | User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings Affected: before 5.2.6 |
| CVE-2026-11965 | 6.5 | Jul 2 | User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass Affected: before 5.2.0 |
| CVE-2026-11966 | 5.3 | Jul 17 | User Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription Handler Affected: 4.2.3 before 5.2.3 |
| CVE-2026-80072 | 4.7 | Sep 13 | User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters Affected: before 5.2.8 |
| CVE-2026-79995 | 4.3 | Aug 28 | User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR Affected: before 5.2.5 |
| CVE-2026-86407 | 3.7 | Sep 13 | User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page Affected: 5.0 before 5.2.8 |
Showing 14