An advisory has been published about a critical vulnerability discovered in the User Registration & Membership plugin for WordPress, installed on more than 60,000 websites. The vulnerability is rated 9.8/10. It enables unauthenticated attackers to create administrator-level accounts.
User Registration & Membership WordPress Plugin
The plugin is used to build membership websites. It allows site owners to create custom registration forms, assign user roles, restrict content behind subscription plans, and accept payments for access.

![[CITYPNG.COM]White Google Play PlayStore Logo – 1500×1500](https://startupnews.fyi/wp-content/uploads/2025/08/CITYPNG.COMWhite-Google-Play-PlayStore-Logo-1500x1500-1-630x630.png)