{"id":"CVE-2026-109873","published":"2026-11-11T06:17:11.013","lastModified":"2026-11-11T06:17:11.013","description":"The User Registration & Membership  WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction when a registration is submitted without a membership selection, allowing unauthenticated users to create an account on a payment-gated registration form and log in without completing payment.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/4cce0bb5-eb8e-4452-a6d1-6c408344bc7f/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}