CyberRota Analysis
AI-GeneratedThe User Registration & Membership plugin for WordPress prior to version 5.2.6 is vulnerable as it fails to respect the site's registration-disabled setting, enabling unauthenticated users to create accounts despite the administrator disabling open registration. This flaw poses a significant risk of unauthorized account creation, potentially leading to spam accounts or malicious user activity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this vulnerability.
Original NVD Description
The User Registration & Membership WordPress plugin before 5.2.6 does not enforce the site's registration-disabled setting when processing registration-form submissions, allowing unauthenticated users to create new accounts even when the administrator has turned off open registration.