CVE-2026-74001

CVSS 9.8 (critical) · published 2026-08-20

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

Weakness: CWE-288

Source: NVD CVE-2026-74001

References

• https://patchstack.com/database/wordpress/plugin/user-registration-pro/vulnerability/wordpress-user-registration-membership-pro-plugin-5-4-5-account-takeover-vulnerability?_s_id=cve

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.