CVE-2026-1492: fallo crítico en wpeverest User Registration & Membership…
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
90Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 9.8epss 29%
de la publicación al arma17 días
Publicada en NVD3 mar
1ª PoC+17d
VulnCheck2 mar
The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
wpeverest · User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login BuilderPoCs públicas encontradas — 4
githubgithub.com/limo57640-crypto/wp-user-registration-vuln-checker★ 0vulncheckvulncheck.com/xdb/2dac0b342b1dno verificadovulncheckvulncheck.com/xdb/9a888e2948cdno verificadovulncheckvulncheck.com/xdb/3e24120e6e1fno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — wpeverest User Registration & Membership…
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-3342CRITICALUser Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.7%CVE-2023-3343HIGHUser Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object InjectionEPSS 1.1%CVE-2024-2417HIGHUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationEPSS 0.9%CVE-2024-3295MEDIUMUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media DeletionEPSS 0.9%CVE-2026-6203MEDIUMUser Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' ParameterEPSS 0.7%CVE-2024-1720MEDIUMUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site ScriptingEPSS 0.5%