Kadence Memberships <=4.0.0 Unauthenticated Password Reset Link Poisoning to Account Takeover (CVE-2026-9273)

Vulnerability Overview Vulnerability Name: Membership Plugin – Kadence Memberships <= 4.0.0 - Unauthenticated Password Reset Link Poisoning to Account Takeover CVE ID: CVE-2026-9273 CVSS Score: 9.3 (Critical) Release Date: August 4, 2026 Last Updated: August 5, 2026 Researchers: sc0rp - bjc59RT/ASIN Affected Products Software Type: Plugin Software Slug: restrict-content (view on wordpress.org) Affected Versions: <= 4.0.0 Fixed Versions: 4.0.1 Remediation Mitigation: Upgrade to version 4.0.1 or later patched version Vulnerability Description This vulnerability exists in the Membership Plugin – Kadence Memberships plugin, which was formerly known as Restrict Content for WordPress. The flaw allows for password reset link manipulation, leading to account takeover. Specifically, in the older password handling function , an attacker can inject unverified input into the function within the file by controlling the POST parameter. This enables the attacker to craft a valid password reset request and redirect it to a server under their control to capture the victim's password reset link, thereby completing the account takeover. References plugins.trac.wordpress.org Additional Information Sharing Options: Share via Facebook, Twitter, LinkedIn, and Email Related Vulnerabilities: The page lists other related vulnerabilities, including detailed information such as CVE IDs, CVSS scores, researchers, and release dates for different versions. Disclaimer This record contains copyrighted material, copyright owned by Defiant Inc. and The MITRE Corporation. Contact For any questions or further information, please contact support@wordfence.com. Business Hours Business hours are 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT, excluding weekends and holidays. 24/7 customer support with a 1-hour response time, available 365 days a year. Other Links Terms and Conditions Privacy Policy and Collection Notice Do Not Sell or Share My Personal Information Products and Support Wordfence Free Wordfence Premium Wordfence Care Wordfence Response Wordfence CLI Wordfence Intelligence Wordfence Central News and Updates Blog News Vulnerability Advisories About About Wordfence Affiliate Program Careers Contact Security CVE Request Form Subscribe Subscribe to receive news and updates, getting the latest vulnerability information from our professional team. Copyright © 2012-2026 Defiant Inc. All rights reserved.

Goal Reached Thanks to every supporter — we hit 100%!

Kadence Memberships <=4.0.0 Unauthenticated Password Reset Link Poisoning to Account Takeover (CVE-2026-9273)

More from this source