Back Gbhackers

WordPress Membership Plugin Flaw Lets Attackers Create Admin Accounts

Gbhackers •Divya • March 6, 2026

A critical security vulnerability in the popular WordPress User Registration & Membership plugin allows unauthenticated attackers to easily create administrator accounts. The severe flaw, officially tracked as CVE-2026-1492, currently affects all plugin versions up to and including 5.1.2. Because it requires no prior authentication or user interaction to exploit, the vulnerability carries a maximum critical […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in WordPress Plugin Exploited for Unauthorized Admin Access A critical vulnerability (CVE-2026-1492) in the User Registration & Membership plugin, used by over 60,000 WordPress sites, is being actively exploited by hackers to create unauthorized admin accounts. The vulnerability has a severity rating of 9.8, indicating a significant risk to affected sites, which can lead to unauthorized access and control. 8 sources 71

Extracted Entities

WordPress Membership Plugin Flaw Lets Attackers Create Admin Accounts

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)