PT-2026-32547 · WordPress · User Registration & Membership

Anthony Cihan + 2 · Published 2026-04-13 · Updated 2026-04-14 · CVE-2026-6203

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions User Registration & Membership versions prior to 5.1.5

Description The User Registration & Membership plugin for WordPress contains an open redirect issue. This occurs because user-supplied URLs provided through the 'redirect to on logout' GET parameter are not sufficiently validated before being processed by the wp redirect() function. Although esc url raw() is used to sanitize malformed URLs, it fails to restrict the destination to the local domain. This allows an attacker to create a link that redirects users to external malicious websites after they log out, which can be used to facilitate phishing attacks.

Recommendations Update the plugin to a version later than 5.1.4. As a temporary workaround, restrict access to the 'redirect to on logout' parameter until the update is applied.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2026-6203

Affected Products

User Registration & Membership

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-6203 · Security Note
• https://plugins.trac.wordpress.org/browser/user-registration/tags/5.1.4/includes/functions-ur-template.php#L39 · Note
• https://twitter.com/CVEnew/status/2043976177501561192 · Twitter Post
• https://plugins.trac.wordpress.org/browser/user-registration/trunk/includes/functions-ur-template.php#L39 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/020bed37-9544-49b7-941d-3b7f509fdfdf?source=cve · Note
• https://twitter.com/pdnuclei_bot/status/2044083291926737074 · Twitter Post