Known CVE

User Registration & Membership WordPress plugin - Open Redirect

User Registration & Membership WordPress plugin <= 5.1.4 contains an open redirect caused by insufficient validation of 'redirect_to_on_logout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL.

CVE-2026-6203

Medium2026CVSS 6.1CWE-601

cve2026 · wp · wordpress · wp-plugin · user-registration · open-redirect

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website