Cpe:2.3:a:user_registration_\\&_membership_project:user_registration_\\&_membership:*:*:*:*:*:wordpress:*:*

The User Registration & Membership WordPress plugin before 5.3.2 fails to validate discount coupons, allowing unauthenticated attackers to register for paid plans for free and potentially escalate privileges to administrator.