https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:52:52.949360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-288804 EUVD-2026-288804 2026-10-09T02:52:53.001061+00:00 EUVD-2026-288804 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1779 fkie_cve-2026-1779 2026-10-09T02:52:53.001103+00:00

The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthenticated attackers to log in a newly registered user on the site who has the 'urm_user_just_created' user meta set.

 https://cve.radiocsirt.org/vuln/ghsa-xm8p-wgjh-pfxf GHSA-xm8p-wgjh-pfxf 2026-10-09T02:52:53.001139+00:00

The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthenticated attackers to log in a newly registered user on the site who has the 'urm_user_just_created' user meta set.