PT-2026-22112
CVE-2026-1779
·
Published
2026-02-25
·
Updated
2026-03-03
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
User Registration & Membership plugin for WordPress versions up to and including 5.1.2
Description
The User Registration & Membership plugin for WordPress is affected by an authentication bypass. This is caused by incorrect authentication in the
register member function. An unauthenticated attacker can log in as a newly registered user if that user has the urm user just created user meta set.Recommendations
Update the User Registration & Membership plugin to a version newer than 5.1.2.
Found an issue in the description? Have something to add? Feel free to write us 👾