CVE-2026-10820 | Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin authorization

A vulnerability marked as critical has been reported in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin up to 4.16.16 on WordPress. This issue affects some unknown processing. This manipulation causes authorization bypass.

This vulnerability is registered as CVE-2026-10820. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.