🔐 CVE Alert

CVE-2026-6145

MEDIUM 5.3

User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th

The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5. This is due to the is_admin_creation_process() method relying solely on the presence of action=createuser in the $_REQUEST superglobal without performing any authentication or capability check. This makes it possible for unauthenticated attackers to bypass the admin approval requirement when registering new accounts via the fallback submission path.

CWE CWE-862
Vendor wpeverest
Product user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder
Published May 14, 2026
Stay Ahead of the Next One

Get instant alerts for wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder

Be the first to know when new medium vulnerabilities affecting wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

wpeverest / User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
0 ≤ 5.1.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/b6b349f2-24c9-4921-bb5f-a7726ebc5c2a?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset/3516468/user-registration/trunk/includes/class-ur-user-approval.php

Credits

Anthony Cihan