A vulnerability was found in User Registration & Membership Plugin up to 5.1.2 on WordPress. It has been declared as critical. This issue affects the function register_member. Such manipulation leads to improper control of resource identifiers.

This vulnerability is referenced as CVE-2026-2356. It is possible to launch the attack remotely. No exploit is available.