{"affected":[{"defaultStatus":"unaffected","product":"User Registration & Membership","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"5.3.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-109871","cwes":["CWE-284"],"description":"The User Registration & Membership  WordPress plugin before 5.3.2 does not verify that a payment has actually been completed before extending a paid membership subscription, allowing authenticated users with an active paid subscription to renew it indefinitely without paying.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/444889b1-ae92-45b6-a13b-e76a5fa7ce58/"}],"kev":null,"metrics":[],"modifiedAt":1794376805831,"publishedAt":1794376805831,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/444889b1-ae92-45b6-a13b-e76a5fa7ce58/"}],"remediation":[],"revision":"747f4af59938c515a55b6351999a67ab1c2eb485b33fab3318b14cce81664508","sources":[{"modifiedAt":1794376805831,"name":"CNA: WPScan","retrievedAt":1794377309251,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109871"}],"ssvc":null,"status":"published","title":"User Registration & Membership < 5.3.2 - Subscriber+ Payment Bypass via Membership Renewal","updatedAt":1794377309251}