What is GHSA-5c3c-g52p-xg2h?

GHSA-5c3c-g52p-xg2h is a security advisory published by GitHub Security Advisories with Medium severity. The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer...

Which CVE IDs does GHSA-5c3c-g52p-xg2h cover?

GHSA-5c3c-g52p-xg2h covers the following CVE IDs: CVE-2026-19709. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5c3c-g52p-xg2h?

GHSA-5c3c-g52p-xg2h has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-5c3c-g52p-xg2hMediumCVSS 5.3

The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-19709 →

📋 Description

The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan details on sites where the API has been enabled but no keys were ever generated.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19709
https://wpscan.com/vulnerability/957888a4-bb11-42c6-930a-8c836170452b
https://github.com/advisories/GHSA-5c3c-g52p-xg2h