CVE-2026-79996

Summary

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.

Affected Software

VendorProductVersion RangeStatus
UnknownUser Registration & Membership0 < 5.2.6affected

Weaknesses

  • CWE-269 Improper Privilege Management

References