CVE-2026-1779 - Vulnerability Analysis

Overview

User Registration & Membership WordPress plugin <= 5.1.2 contains an authentication bypass caused by incorrect authentication in the 'register_member' function, letting unauthenticated attackers log in newly registered users with specific user meta set.

Severity & Score

Impact

Unauthenticated attackers can log in as newly registered users, potentially gaining unauthorized access.

Mitigation

Update to the latest version beyond 5.1.2.

References

• https://plugins.trac.wordpress.org/browser/user-registration/tags/5.0.4/modules/membership/includes/AJAX.php#L246
• https://www.wordfence.com/threat-intel/vulnerabilities/id/d99bc021-ba9e-4294-8dd2-c25bc8007d05?source=cve

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 26, 2026

🟠 CVE-2026-1779 - High (8.1) The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2. This is due to incorrect authentication in the 'register_member' function. This makes it possible for unauthent... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-1779/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner