CVE Catalog
CVE-2026-73995
MediumCVSS 5.4Summary
The User Registration plugin version 5.2.6 and earlier has a broken authentication vulnerability exploitable by Subscriber users. This means a subscriber can gain unauthorized access to accounts or functions they should not have permissions for.
Risk Assessment
The risk is that a low-privileged user can take over accounts or access sensitive data, potentially leading to confidentiality and integrity breaches.
Recommendation
It is recommended to update the plugin to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
Subscriber Broken Authentication in User Registration <= 5.2.6 versions.