CVE-2026-110523 - WP User Manager 2.9.21 - 2.9.25 - Unauthenticated Privilege Escalation via Paid Registration Role After Stripe Disconnect
CVE ID :CVE-2026-110523 Published : Oct. 21, 2026, 6:16 a.m. | 5 hours, 50 minutes ago Description :The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force once the payment gateway is disconnected, while a published paid...