CVE-2026-92797— Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter

Quick assessment

Affected

MemberPress Memberpress

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 的 MemberPress 插件在 1.14.1 及更早版本中存在跨站请求伪造（CSRF）漏洞。该漏洞源于函数中可被绕过的 nonce 验证检查：该函数在第 1119 行使用条件判断 nonce 参数，攻击者只需在请求中省略该参数，即可完全绕过安全验证。这使得未认证的攻击者能够伪造请求，诱导已认证用户执行操作（例如点击链接），从而修改其邮箱地址。一旦邮箱被篡改，攻击者便可利用密码重置功能接管用户账户。

CVSS 8.8 · High Updated Oct 28, 2026

Possible ATT&CK Techniques 2 AI

T1551.002 T1190.002

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter

Source: CVE Program / CVE List V5

Vulnerability Description

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save_profile_fields() function that uses an isset() condition at line 1119, allowing the security check to be completely bypassed by simply omitting the nonce parameter from the request. This makes it possible for unauthenticated attackers to change authenticated users' email addresses via a forged request granted they can trick an authenticated user into performing an action such as clicking on a link, leading to account takeover through password reset functionality.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨站请求伪造(CSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
MemberPress	Memberpress	0 ~ 1.14.1	-

II. Public POCs for CVE-2026-92797

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-92797

请登录查看更多情报信息。

Other References for CVE-2026-92797 (2)

https://www.cve.org/CVERecord?id=CVE-2026-92797

IV. Related Vulnerabilities

Same product: Memberpress

Same vendor: MemberPress

Same weakness: CWE-352