Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:05:35 +0000 CVE-2026-79996 — User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings https://cve.radiocsirt.org/vuln/cve-2026-79996 <p><strong>Affected:</strong> Unknown User Registration &amp; Membership</p> <p>The User Registration &amp; Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration &amp; Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.</p> <p><strong>Affected:</strong> Unknown User Registration &amp; Membership</p> <p>The User Registration &amp; Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration &amp; Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.</p> https://cve.radiocsirt.org/vuln/cve-2026-79996