Unrated severityNVD Advisory· Published Sep 13, 2026

CVE-2026-80072

Description

The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/User Registration \& Membershipllm-fuzzy
Range: <5.2.8

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0af2c06d-87a0-4be7-a409-ffb7ad958aad/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000