CVE-2026-1869
Description
The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing validation checks in the confirm_payment() function in all versions up to, and including, 5.2.0. This makes it possible for unauthenticated attackers to bypass payment processing and activate paid memberships.
Summary dbcve.org
This WordPress membership plugin has a broken access control vulnerability in the confirm_payment() function. The function lacks proper validation of payment status and user authorization, allowing unauthenticated attackers to manipulate the payment confirmation process and activate paid memberships without actually completing payment.
Mitigation
Update the plugin to version 5.2.1 or later once available. Alternatively, disable the plugin or restrict access to payment-related endpoints at the web server level until a patch is applied.