{"id":"CVE-2026-109870","published":"2026-11-11T06:17:10.727","lastModified":"2026-11-11T06:17:10.727","description":"The User Registration & Membership  WordPress plugin before 5.3.2 does not verify that a discount coupon applied to a paid membership plan is actually valid for that plan before treating a fully discounted order as paid, allowing unauthenticated users to be granted the role mapped to a paid plan without paying for it, which can lead to privilege escalation up to administrator where a plan is mapped to a privileged role.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/6cac7dd1-2ae5-4b5b-94c7-a8a4a63ef84b/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}