https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 16:23:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335991 EUVD-2026-335991 https://cve.radiocsirt.org/vuln/euvd-2026-335991 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11963 <p>The User Registration &amp; Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user&#39;s WordPress role and membership tier.</p> <p>The User Registration &amp; Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user&#39;s WordPress role and membership tier.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-11963 https://cve.radiocsirt.org/vuln/ghsa-qxg2-gwhj-546g <p>The User Registration &amp; Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user&#39;s WordPress role and membership tier.</p> <p>The User Registration &amp; Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user&#39;s WordPress role and membership tier.</p> https://cve.radiocsirt.org/vuln/ghsa-qxg2-gwhj-546g