{"affected":[{"defaultStatus":"unaffected","product":"User Registration & Membership","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"5.3.2","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-109873","cwes":["CWE-287"],"description":"The User Registration & Membership  WordPress plugin before 5.3.2 does not enforce its payment-before-login restriction when a registration is submitted without a membership selection, allowing unauthenticated users to create an account on a payment-gated registration form and log in without completing payment.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/4cce0bb5-eb8e-4452-a6d1-6c408344bc7f/"}],"kev":null,"metrics":[],"modifiedAt":1794376806004,"publishedAt":1794376806004,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/4cce0bb5-eb8e-4452-a6d1-6c408344bc7f/"}],"remediation":[],"revision":"ef73d4af17480428691c88f27eb8e77a7f07d7abb84d7b8f685aa4cc3dbfa810","sources":[{"modifiedAt":1794376806004,"name":"CNA: WPScan","retrievedAt":1794377310365,"url":"https://www.cve.org/CVERecord?id=CVE-2026-109873"}],"ssvc":null,"status":"published","title":"User Registration & Membership < 5.3.2 - Unauthenticated Payment Before Login Bypass via Omitted Membership Field","updatedAt":1794377310365}