CVE-2026-92978: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom…

Affected technology

User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder · 0 through 5.2.8
wpeverest

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An attacker can bypass the earlier nonce check in trigger_query_actions() by supplying an empty new_role parameter, which causes that handler to return early and cede control to the unprotected trigger_bulk_action() handler; the exit() call at the end of that handler additionally prevents WordPress core's own bulk-users nonce validation from executing. Vendor/CNA’s CVSS 3.1 assessment (base score 4.3/10) rates confidentiality and availability impact as none; integrity impact as low.