← All advisories

Critical severity9.8NVD Advisory· Published Aug 20, 2026· Updated Aug 20, 2026

CVE-2026-74001

CVE-2026-74001

Description

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/User Registration \& Membershipllm-fuzzy
Range: <=5.4.5

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/user-registration-pro/vulnerability/wordpress-user-registration-membership-pro-plugin-5-4-5-account-takeover-vulnerabilitynvd

News mentions

1

WordPress: 25 Plugin Vulnerabilities Disclosed in Single-Hour Batch
Vypr Intelligence · Aug 20, 2026