Threats tagged 'ghsa-8hg5-rmfq-grr7'

The User Registration & Membership WordPress plugin versions prior to 5.3.2 contain a vulnerability where the plugin does not verify that a payment has been completed before extending a paid membership subscription. This flaw allows authenticated users with an active paid subscription to renew their membership indefinitely without making additional payments.