https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:43:15.676710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-80071 CVE-2026-80071 — User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator 2026-10-05T23:43:15.692656+00:00

Affected: Unknown User Registration & Membership

The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate the plan a user attaches to their own account, allowing authenticated users with Author-level access and above to assign themselves an arbitrary role and escalate their privileges to Administrator.