Threats tagged 'ghsa-h557-fcpg-wv42'

The User Registration & Membership WordPress plugin versions prior to 5.3.2 fail to enforce the payment-before-login restriction if a registration is submitted without selecting a membership. This flaw allows unauthenticated users to create accounts on payment-gated registration forms and log in without completing payment.