{"id":"CVE-2026-109871","published":"2026-11-11T06:17:10.860","lastModified":"2026-11-11T06:17:10.860","description":"The User Registration & Membership  WordPress plugin before 5.3.2 does not verify that a payment has actually been completed before extending a paid membership subscription, allowing authenticated users with an active paid subscription to renew it indefinitely without paying.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/444889b1-ae92-45b6-a13b-e76a5fa7ce58/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}