CVE Explorer

CVE-2026-1779

The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthenticated attackers to log in a newly registered user on the site who has the 'urm_user_just_created' user meta set.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:53e908529e9ec189fa57106c37d02874c3bc453d493090ffda5ace43f56a1428

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder","vendor":"wpeverest","versions":[{"lessThanOrEqual":"5.1.2","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:445203e02a148b4430d6028e69999ec55c71f861989a791b534184128ef151a7 · sha256:0a05b5cc9d2f406b… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:445203e02a148b4430d6028e69999ec55c71f861989a791b534184128ef151a7 · sha256:0a05b5cc9d2f406b… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-288","description":"CWE-288 Authentication Bypass Using an Alternate Path or Channel","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:445203e02a148b4430d6028e69999ec55c71f861989a791b534184128ef151a7 · sha256:0a05b5cc9d2f406b… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"url":"https://plugins.trac.wordpress.org/browser/user-registration/tags/5.0.4/modules/membership/includes/AJAX.php#L246"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:445203e02a148b4430d6028e69999ec55c71f861989a791b534184128ef151a7 · sha256:0a05b5cc9d2f406b… · /containers/cna/references/1

{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d99bc021-ba9e-4294-8dd2-c25bc8007d05?source=cve"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:445203e02a148b4430d6028e69999ec55c71f861989a791b534184128ef151a7 · sha256:0a05b5cc9d2f406b… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer