Vulnerabilities / User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder / WPSEC-2026-2714
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.3.1 - Unauthenticated Information Exposure via REST API Comments on Restricted Content
Medium 5.3
CWE-200Fixed in 5.3.2
- ID
- WPSEC-2026-2714
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (user-registration)
- Affected
- all versions before 5.3.2
- Remediation
- Update to 5.3.2 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-11-07
- Attack surface
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder on WPSec AttackSurface
- Fix released
- Published
Description
The User Registration & Membership plugin for WordPress is vulnerable to Sensitive Information Exposure via the WordPress REST API comments endpoints in all versions up to, and including, 5.3.1. This is due to the content restriction module hiding comments on restricted posts on the front end but not removing them from REST comment responses. This makes it possible for unauthenticated attackers to read comments posted on content restricted to members.
References
- https://wpsec.com/vuln/WPSEC-2026-2714/
- https://plugins.svn.wordpress.org/user-registration/tags/5.3.2/
- https://wordpress.org/plugins/user-registration/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS