{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-109870/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:user_registration_\\\\\u0026_membership_project:user_registration_\\\\\u0026_membership:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-109870"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["User Registration \u0026 Membership (\u003c 5.3.2)"],"_cs_severities":["high"],"_cs_tags":["wordpress","plugin","vulnerability","cve-2026-109870"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe User Registration \u0026amp; Membership WordPress plugin (versions before 5.3.2) contains an improper authorization vulnerability (CVE-2026-109870). The plugin fails to verify that a discount coupon is valid for a specific membership plan before processing the order. An unauthenticated attacker can exploit this to bypass payment verification for paid membership plans. Depending on the membership plan configuration, this can lead to unauthorized assignment of membership roles, including administrative access if a plan is mapped to a high-privilege role.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated users to gain paid membership levels without payment. This can result in unauthorized access to restricted content or privilege escalation if the membership plan is configured to grant administrative roles.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the User Registration \u0026amp; Membership WordPress plugin to version 5.3.2 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit existing membership plan role mappings to ensure that elevated roles (e.g., Administrator, Editor) are not assigned to self-registration membership plans.\u003c/li\u003e\n\u003cli\u003eReview registration logs for anomalous signup patterns, specifically multiple successful registrations utilizing coupon codes that should be restricted.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T13:58:48Z","date_published":"2026-11-11T13:58:48Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-109870/","summary":"The User Registration \u0026 Membership WordPress plugin before 5.3.2 fails to validate discount coupons, allowing unauthenticated attackers to register for paid plans for free and potentially escalate privileges to administrator.","title":"User Registration \u0026 Membership WordPress Plugin: Improper Authorization (CVE-2026-109870)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-109870/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-109870","version":"https://jsonfeed.org/version/1.1"}