CVE-2026-74001

WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

We have discovered 617 live websites that are affected by CVE-2026-74001.

Run a Free Instant Scan



Affected Software

Product  User Registration & Membership Pro
Category Wordpress Plugins
Vulnerable Domains617 live websites (57% of User Registration & Membership Pro install base)
Vulnerable Versions
  • from 0 through 5.4.5
Vulnerable Versions Count64 versions ( 80% of all versions)


Common Weakness Enumeration

CWE-288 Authentication Bypass Using an Alternate Path or Channel



Details

  • Published - Aug 20, 2026
  • Updated - Aug 20, 2026

Credits

  • 0xd4rk5id3 | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-74001
United States187 websites


Italy62 websites
Germany44 websites
France35 websites
Spain28 websites
Brazil22 websites
GB22 websites
Australia15 websites
Russia15 websites
Canada15 websites

Website Distribution by TLD

Number of websites using CVE-2026-74001
.com261 websites
.it45 websites
.org43 websites
.de24 websites
.com.br19 websites
.net13 websites
.com.au12 websites
.es12 websites
.fr11 websites
.co.uk11 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-74001

Top websites that are affected by CVE-2026-74001. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
********.com United States**,***
****************.**.uk United States***,***
*****************.**.uk United States***,***
******.org United States***,***
**********.com Indonesia***,***
****.org United States***,***
*****.************.com Canada***,***
*******.com United States***,***
************.org United States***,***
*********.it Italy***,***
See full domain list

FAQ

CVE-2026-74001 is Authentication Bypass Using an Alternate Path or Channel in User Registration & Membership Pro
A total of 617 websites have been identified as vulnerable to CVE-2026-74001, based on global website indexing conducted by WebTechSurvey.
The User Registration & Membership Pro is affected by the CVE-2026-74001 vulnerability.
User Registration & Membership Pro versions up to and including 5.4.5 are vulnerable to CVE-2026-74001.