CVE-2026-74001

Published: Ago 20, 2026 Last Modified: Ago 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

288

Authentication Bypass Using an Alternate Path or Channel

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism
Applicable Platforms
Technologies: Not Technology-Specific, Web Based
View CWE Details
https://patchstack.com/database/wordpress/plugin/user-regis…
https://patchstack.com/database/wordpress/plugin/user-registration-pro/vulnerab…