{"id":"CVE-2026-79995","aliases":["EUVD-2026-67574","GHSA-mfx5-4qv9-69f3"],"status":"published","title":"User Registration \u0026 Membership \u003c 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR","description":"The User Registration \u0026 Membership  WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an administrator's.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00254,"percentile":0.17129,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2026-08-28T06:00:17Z","modified":"2026-08-28T18:40:31Z","products":[{"vendor":"unknown","product":"user registration \u0026 membership"}],"references":[{"url":"https://wpscan.com/vulnerability/551423b4-5c0c-48cc-9ba0-1f5637eea446/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79995"},{"url":"https://wpscan.com/vulnerability/551423b4-5c0c-48cc-9ba0-1f5637eea446"},{"url":"https://github.com/advisories/GHSA-mfx5-4qv9-69f3"}],"sources":{"cve":[{"id":"CVE-2026-79995","title":"User Registration \u0026 Membership \u003c 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR","description":"The User Registration \u0026 Membership  WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an administrator's.","status":"published","published":"2026-08-28T06:00:17.343Z","modified":"2026-08-28T13:03:20.229Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T13:50:27.582139Z"}],"euvd":[{"id":"EUVD-2026-67574","description":"The User Registration \u0026 Membership  WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an administrator's.","status":"published","published":"2026-08-28T06:00:17Z","modified":"2026-08-28T13:03:20Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:23.608347Z"}],"ghsa":[{"id":"GHSA-mfx5-4qv9-69f3","title":"The User Registration \u0026 Membership  WordPress plugin before 5.2.5 does not verify that the...","description":"The User Registration \u0026 Membership  WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an administrator's.","status":"published","published":"2026-08-28T09:31:45Z","modified":"2026-08-28T18:31:29Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T15:11:07.541511Z"}],"nvd":[{"id":"CVE-2026-79995","description":"The User Registration \u0026 Membership  WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email change, including an administrator's.","status":"published","published":"2026-08-28T08:16:42.337Z","modified":"2026-08-28T18:40:31.63Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-02T14:12:42.366888Z"}]}}