Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

User Registration & Membership — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in User Registration & Membership, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-86407 User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page - - 2026-09-13
CVE-2026-86406 User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase - - 2026-09-13
CVE-2026-80071 User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator - - 2026-09-13
CVE-2026-80072 User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters - - 2026-09-13
CVE-2026-79996 User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings - - 2026-08-28
CVE-2026-79995 User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR - - 2026-08-28
CVE-2026-16736 User Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration Disabled - - 2026-08-05
CVE-2026-11961 User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID - - 2026-07-17
CVE-2026-11966 User Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription Handler - - 2026-07-17
CVE-2026-11964 User Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation - - 2026-07-13
CVE-2026-11963 User Registration & Membership < 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDOR - - 2026-07-13
CVE-2026-11965 User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass - - 2026-07-02
CVE-2025-2594 User Registration & Membership < 4.1.3 - Authentication Bypass 9.8 - 2025-04-22
CVE-2025-2563 User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation 9.8AI Critical AI 2025-04-14

All 14 known CVE vulnerabilities affecting User Registration & Membership with full Chinese analysis, references, and POCs where available.