https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T18:24:17.309685+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338417 EUVD-2026-338417 2026-10-12T18:24:17.360247+00:00 EUVD-2026-338417 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11966 fkie_cve-2026-11966 2026-10-12T18:24:17.360284+00:00

The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts on a caller-supplied user identifier, allowing unauthenticated attackers to delete recently-registered, payment-pending user accounts.

 https://cve.radiocsirt.org/vuln/ghsa-2wp6-4gxm-vfvx GHSA-2wp6-4gxm-vfvx 2026-10-12T18:24:17.360329+00:00

The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts on a caller-supplied user identifier, allowing unauthenticated attackers to delete recently-registered, payment-pending user accounts.