Cpe:2.3:a:user_registration_and_membership_project:user_registration_and_membership:*:*:*:*:*:wordpress:*:*

An unauthenticated stored XSS vulnerability in the User Registration & Membership plugin allows attackers to inject arbitrary scripts via the checkbox field due to missing nonce validation.