CVE-2026-49081

Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.

Credits

0xd4rk5id3 | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/user-registration-stripe/vulnerability/wordpress-user-registration-stripe-plugin-1-3-12-broken-access-control-vulnerability?_s_id=cve