{
 "id": "WPSEC-2026-2713",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2713/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2713/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2713/index.md",
 "title": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.3.1 - Unauthenticated Authentication Bypass via Auto Login",
 "description": "The User Registration & Membership plugin for WordPress is vulnerable to Authentication Bypass via the membership payment confirmation auto login feature in all versions up to, and including, 5.3.1. This is due to the plugin deciding whether to log a member in from an 'auto_login' flag in the client-supplied form response, and not checking whether the member is still awaiting admin approval or has been disabled. This makes it possible for unauthenticated attackers who register an account to be logged in without the required admin approval when manual approval is enabled on the site.",
 "plugin": {
  "slug": "user-registration",
  "name": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder",
  "full_name": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder",
  "wordpress_org": "https://wordpress.org/plugins/user-registration/",
  "advisories_url": "https://wpsec.com/vuln/plugin/user-registration/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/user-registration"
 },
 "type": "AUTH",
 "cwe": [
  "CWE-287"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.8,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.3.2",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.3.2"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.3.2",
 "remediation": "Update to 5.3.2 or later.",
 "fix_released": "2026-11-06T11:46:22+00:00",
 "published": "2026-11-07T12:41:15+00:00",
 "updated": "2026-11-07T11:11:19.674580+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2713/",
  "https://plugins.svn.wordpress.org/user-registration/tags/5.3.2/",
  "https://wordpress.org/plugins/user-registration/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/user-registration",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-07"
 }
}