ThreatCluster

Critical CVE-2026-1492 Vulnerability in WordPress Plugin Allows Admin Takeover

First seen 13 Apr 2026, 10:13 UTC • •74

Article Content

1 / 3

Browse articles

ThreatCluster •April 14, 2026 at 09:29 UTC

•CVE-2026-1492 allows attackers to bypass authentication and gain admin access.
•The vulnerability affects versions of the User Registration & Membership plugin up to 5.1.2.
•Thousands of WordPress sites are potentially vulnerable, necessitating urgent patching.

A critical vulnerability, tracked as CVE-2026-1492, has been discovered in the User Registration & Membership plugin for WordPress. This flaw enables remote attackers to bypass authentication and gain full administrative access without valid credentials. The vulnerability affects versions up to 5.1.2 of the plugin, which is widely used for managing user registrations on WordPress sites. Thousands of websites globally are at risk due to this security issue. The vulnerability was published on March 3, 2026, and has raised significant concerns among security professionals. Immediate action is recommended to mitigate potential exploitation. No specific exploits have been reported yet, but the ease of access poses a serious threat to affected sites.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 177d ago How this analysis works

Timeline

2026-03-03

CVE-2026-1492 published

2026-04-13

Vulnerability disclosed in cybersecurity articles

More articles in this cluster (2)

Threat Graph

5 entities, 4 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Zero-day Exploit
T1068 - Exploitation for Privilege Escalation
T1190 - Exploit Public-Facing Application

Vulnerability (1)

CVE-2026-1492

Affected Platform (1)

WordPress

Relationships

CVE-2026-1492 targets WordPress
Zero-day Exploit targets WordPress
T1068 - Exploitation for Privilege Escalation targets WordPress
T1190 - Exploit Public-Facing Application targets WordPress

Following this threat?

Track CVE-2026-1492 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…

Critical Citrix NetScaler Vulnerabilities Actively Exploited in Finland The National Cyber Security Centre Finland (NCSC-FI) issued an alert regarding critical vulnerabilities in Citrix NetScaler ADC and Gateway products, specifically CVE-2026-88771 and CVE-2026-88772, which are being actively exploited in Finland. These vulnerabilities allow attackers to execute remote code without…