Beveiligingsadvies

CVE-2026-79996

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 06:00:17

Laatst bijgewerkt 2026-08-28 13:03:20

Toegewezen door WPScan

CVSS-score 7.2

Status PUBLISHED

Beschrijving

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.

← Alle CVE's bekijken Bekijk op cve.org ↗