Threats tagged 'ghsa-6h65-cg43-m9vg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-109870The User Registration & Membership WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a High2026-11-11GCVE DatabaseCVE-2026-109870 A vulnerability in the User Registration & Membership WordPress plugin before version 5.3.2 allows unauthenticated users to exploit improperly validated discount coupons. This flaw permits users to obtain roles mapped to paid membership plans without payment, potentially escalating privileges up to administrator if the plan is linked to a privileged role. Report on CVE-2026-109870 Vulnerability #ghsa-6h65-cg43-m9vg	GCVE Database	2026-11-11

Page 1 of 1