{
 "id": "WPSEC-2026-2993",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2993/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2993/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2993/index.md",
 "title": "Membership Plugin – Kadence Memberships <= 4.0.5 - Unauthenticated Missing Authorization to Database Maintenance Actions",
 "description": "The Membership Plugin – Kadence Memberships plugin for WordPress is vulnerable to unauthorized modification of data via the 'rcp-action' database maintenance actions in all versions up to, and including, 4.0.5, due to missing capability and nonce checks on the rcp_upgrade_table_collation and rcp_run_upgrade functions hooked to admin_init. This makes it possible for unauthenticated attackers to run ALTER TABLE statements that convert the plugin's membership level, discount and payment tables to the utf8 character set, which can corrupt stored data. When a legacy database upgrade is pending, they can also run the legacy upgrade routines.",
 "plugin": {
  "slug": "restrict-content",
  "name": "Membership Plugin – Kadence Memberships",
  "full_name": "Membership Plugin – Kadence Memberships",
  "wordpress_org": "https://wordpress.org/plugins/restrict-content/",
  "advisories_url": "https://wpsec.com/vuln/plugin/restrict-content/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/restrict-content"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": "3.0",
    "from_inclusive": true,
    "to": "4.0.6",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 3.0 before 4.0.6"
  ]
 },
 "introduced_in": "3.0",
 "fixed_in": "4.0.6",
 "remediation": "Update to 4.0.6 or later.",
 "fix_released": "2026-11-11T16:33:33+00:00",
 "published": "2026-11-12T17:52:14+00:00",
 "updated": "2026-11-12T17:15:04.684153+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2993/",
  "https://plugins.svn.wordpress.org/restrict-content/tags/4.0.6/",
  "https://wordpress.org/plugins/restrict-content/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/restrict-content",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-12"
 }
}