CVE-2026-3445 | properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin process_checkout authorization

A vulnerability, which was classified as critical, has been found in properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content Plugin up to 4.16.11 on WordPress. The impacted element is the function process_checkout of the component User Registration Handler. The manipulation of the argument change_plan_sub_id leads to missing authorization.

This vulnerability is uniquely identified as CVE-2026-3445. The attack is possible to be carried out remotely. No exploit exists.