Skip to contentUnknown User Registration & Membership vulnerabilities
- unknown user registration & membershipUser Registration & Membership < 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership FieldCVE-2026-1098735.3 Medium
- unknown user registration & membershipUser Registration & Membership < 5.3.2 - Subscriber+ Payment Bypass via Membership RenewalCVE-2026-1098714.3 Medium
- unknown user registration & membershipUser Registration & Membership 5.2.8 - 5.3.1 - Unauthenticated Privilege Escalation via Coupon-Based Payment BypassCVE-2026-1098708.1 High
- unknown user registration & membershipUser Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You PageCVE-2026-864073.7 Low
- unknown user registration & membershipUser Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership PurchaseCVE-2026-864067.5 High
- unknown user registration & membershipUser Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect ParametersCVE-2026-800724.7 Medium
- unknown user registration & membershipUser Registration & Membership < 5.2.8 - Author+ Privilege Escalation to AdministratorCVE-2026-800717.2 High
- unknown user registration & membershipUser Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login SettingsCVE-2026-799967.2 High
- unknown user registration & membershipUser Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDORCVE-2026-799954.3 Medium
- unknown user registration & membershipUser Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration DisabledCVE-2026-167367.5 High
- unknown user registration & membershipUser Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription HandlerCVE-2026-119665.3 Medium
- unknown user registration & membershipUser Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership IDCVE-2026-119618.1 High
- unknown user registration & membershipUser Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership ActivationCVE-2026-119649.1 Critical
- unknown user registration & membershipUser Registration & Membership < 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDORCVE-2026-119638.1 High
- unknown user registration & membershipUser Registration & Membership < 5.2.0 - Unauthenticated Paid Membership BypassCVE-2026-119656.5 Medium
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.3 - Authentication BypassCVE-2025-2594Public exploit8.1 High
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.2- Unauthenticated Privilege EscalationCVE-2025-2563Public exploitEPSS 49.1%8.1 High