Advisories · Technology
User Registration & Membership.
Every CVE that names User Registration & Membership among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
User Registration & Membership < 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership Field
- User Registration & Membership
- Authentication bypass
- CVSS 4.3 Medium
User Registration & Membership < 5.3.2 - Subscriber+ Payment Bypass via Membership Renewal
- User Registration & Membership
- Broken access control
- CVSS 8.1 High
User Registration & Membership 5.2.8 - 5.3.1 - Unauthenticated Privilege Escalation via Coupon-Based Payment Bypass
- User Registration & Membership
- Privilege escalation
- CVSS 3.7 Low
User Registration & Membership < 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page
- User Registration & Membership
- Information disclosure
- CVSS 7.5 High
User Registration & Membership < 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase
- User Registration & Membership
- Privilege escalation
- CVSS 4.7 Medium
User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters
- User Registration & Membership
- Open redirect
- CVSS 7.2 High
User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator
- User Registration & Membership
- Privilege escalation
- CVSS 7.2 High
User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings
- User Registration & Membership
- Privilege escalation
- CVSS 4.3 Medium
User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR
- User Registration & Membership
- Broken access control
- CVSS 7.5 High
User Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration Disabled
- User Registration & Membership
- Broken access control
- CVSS 5.3 Medium
User Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription Handler
- User Registration & Membership
- Broken access control
- CVSS 8.1 High
User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID
- User Registration & Membership
- Privilege escalation
- CVSS 9.1 CriticalCritical · CVSS 9+
User Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership Activation
- User Registration & Membership
- CVSS 8.1 High
User Registration & Membership < 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDOR
- User Registration & Membership
- CVSS 6.5 Medium
User Registration & Membership < 5.2.0 - Unauthenticated Paid Membership Bypass
- User Registration & Membership
- CVSS 8.1 High
User Registration & Membership < 4.1.3 - Authentication Bypass
- User Registration & Membership
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
- User Registration & Membership