Product
The User Registration & Membership WordPress plugin before 5.3.2 fails to validate discount coupons, allowing unauthenticated attackers to register for paid plans for free and potentially escalate privileges to administrator.