Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-15246 1 Wordpress-extensions 1 Realhomes Memberships 2026-11-11 4.3 Medium
The RealHomes Memberships WordPress plugin before 3.1.0 does not verify that a membership payment actually completed, nor check a nonce or the user's capability, before granting a paid membership package, allowing any authenticated user such as a Subscriber to obtain paid membership packages without paying.