← العودة للجدول
CVE-2026-96660
CVE-2026-96660 — The User Registration & Membership – Free & Paid Memberships, Subscrip
📅 2026-10-17
🟠 High 🔥 No NVD Exploit WordPress CVSS 7.2

📋 الوصف الكامل

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Checkbox Field Value in all versions up to, and including, 5.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-96660

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v5.2.8

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←