PT-2026-50314 · Themegrill+1 · Simple User Registration

·

CVE-2026-40726

·

Published

2026-04-16

·

Updated

2026-06-17

CVSS v3.1

8.2

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions User Registration Stripe versions prior to 1.3.15
Description Broken access control allows unauthenticated attackers to perform unauthorized actions due to a missing capability check in a function within the plugin.
Recommendations Update User Registration Stripe to version 1.3.15 or later.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-40726

Affected Products

Simple User Registration