CVE-2026-11965— User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass
Possible ATT&CK Techniques 1AI
T1136 · Create AccountAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | User Registration & Membership | < 5.2.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-11965
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass
Source: NVD (National Vulnerability Database)
Vulnerability Description
The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscription, allowing unauthenticated users (after self-registering an account through the open registration flow) to obtain an active subscription on any paid plan without paying and access the gated content.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WPEverest User Registration & Membership 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
wpeverest user registration & membership是wpeverest公司开源的一个用户注册与会员管理插件。 WPEverest User Registration & Membership 5.2.0之前版本存在授权问题漏洞，该漏洞源于未在激活付费会员订阅前强制执行付款完成，允许未经身份验证的用户通过开放注册流程自行注册账户后，无需支付即可获取任何付费计划的活跃订阅并访问受限内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | User Registration & Membership | 0 ~ 5.2.0 | - |
II. Public POCs for CVE-2026-11965
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-11965
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-11965 (1)
- 🔗 User Registration & Membership < 5.2.0 – Unauthenticated Paid Membership Bypass | CVE 2026-11965 | Plugin Vulnerabilities Read full article exploitvdb-entrytechnical-description
Same Patch Batch · Unknown · 2026-07-02 · 4 CVEs total
| CVE-2026-11578 | Fluent Forms < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR | |
| CVE-2026-11781 | Adminify < 4.2.10 - Contributor+ Sensitive Information Disclosure via Global Search AJAX | |
| CVE-2026-10077 | YOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data Attributes |
IV. Related Vulnerabilities
Same vendor: Unknown
- CVE-2026-6382
Multiple elFinder Plugins - Authenticated OS Command Injecti - CVE-2026-11855
Simple Membership < 4.7.5 - Unauthenticated Stored XSS via S - CVE-2026-11962
FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload - CVE-2026-12083
Admin and Site Enhancements < 8.8.4 - Unauthenticated Admini - CVE-2026-11766
Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom
V. Comments for CVE-2026-11965
No comments yet