What the vulnerability does
01Description
The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API endpoints in versions 5.0.1 through 5.1.4. This is due to the `check_permissions()` method only checking for `edit_posts` capability instead of an administrator-level capability. This makes it possible for authenticated attackers, with Contributor-level access and above, to list, create, modify, toggle, duplicate, and delete site-wide content restriction rules, potentially exposing restricted content or denying legitimate user access.
Explanation of Vulnerability in Simple Terms
02Summary
The User Registration & Membership plugin for WordPress fails to properly check permissions before allowing certain actions. A logged-in user with low privileges can read or modify data they should not have access to. The vulnerability affects versions up to 5.1.4. Update to a version newer than 5.1.4 to resolve this issue.
What an attacker can do
03Attacker Capabilities
Read or modify data belonging to other users or the site without proper authorization.
Potential impact on your site
04Site Impact
User data and site content may be exposed to or altered by low-privilege account holders.
Conditions required to exploit
05Prerequisites
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
06Disclosure timeline
March 23, 2026
CVE published
April 8, 2026
Record updated
