What is GHSA-w78c-fx7q-9x8m?

GHSA-w78c-fx7q-9x8m is a security advisory published by GitHub Security Advisories with Medium severity. The User Registration \u0026 Membership WordPress plugin before 5.2.8 does not validate the...

Which CVE IDs does GHSA-w78c-fx7q-9x8m cover?

GHSA-w78c-fx7q-9x8m covers the following CVE IDs: CVE-2026-80072. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w78c-fx7q-9x8m?

GHSA-w78c-fx7q-9x8m has a CVSS v3 base score of 4.7, published by GitHub Security Advisories.

GHSA-w78c-fx7q-9x8mMediumCVSS 4.7

The User Registration & Membership WordPress plugin before 5.2.8 does not validate the...

Vendor

GitHub Security Advisories

Published

September 13, 2026

Last Modified

September 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-80072 →

📋 Description

The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phishing.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-80072
https://wpscan.com/vulnerability/0af2c06d-87a0-4be7-a409-ffb7ad958aad
https://github.com/advisories/GHSA-w78c-fx7q-9x8m