medium5.3
CVE-2026-110527
The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent pa…
Impact
The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.
Affected products
| Product | Affected versions |
|---|---|
| WP User Manager WordPress Plugin | before 2.9.20 |
Versions were read from the advisory text. No structured product data has been published for this record yet.