{"uuid": "e7e827dd-5b82-40dd-8a85-3725e04d8ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1492", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/377", "content": "CVE-2026-1492\n\nThe User Registration & Membership \u2013 Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. This is due to the plugin accepting a user-supplied role during membership registration without properly enforcing a server-side allowlist. This makes it possible for unauthenticated attackers to create administrator accounts by supplying a role value during membership registration.", "creation_timestamp": "2026-08-28T00:00:31.701944Z"}