← العودة للجدول
CVE-2026-92978
CVE-2026-92978 — The User Registration & Membership – Free & Paid Memberships, Subscrip
📅 2026-10-17
🟡 Medium 🔥 No NVD Vulnerability WordPress CVSS 4.3

📋 الوصف الكامل

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.8 This is due to missing or incorrect nonce validation on the trigger_bulk_action function. This makes it possible for unauthe

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-92978

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v5.2.8

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←