VULNERABILITY INTELLIGENCE
CVE-2026-79996
CVSS score7.2 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-08-28
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator access to change arbitrary site options and escalate their privileges to administrator.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-269