WordPress Plugin Opens Admin Takeover

A critical vulnerability in a widely-used WordPress plugin opens the door to admin takeover for over 60,000 websites. The flaw resides in the User Registration & Membership plugin, a favored tool for managing tiered subscription plans and custom login features. This security gap could allow malicious actors to escalate privileges, potentially gaining complete administrative control. The issue has been cataloged under CVE-2026-1492, among others, underscoring its severity.

Experts are urging users of this plugin to stay vigilant and apply patches without delay to mitigate potential risks. The scale of the affected user base highlights how crucial it is for website administrators to ensure immediate updates are implemented. Security community members continue to work diligently to resolve the issue and safeguard the web infrastructure.

For a more comprehensive understanding of the vulnerability, readers are encouraged to access the full article and detailed analysis here:

WordPress Security Alert: Critical Privilege Escalation Flaw in Popular Membership Plugin