SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-73995

MEDIUM · CVSS 5.4 EPSS 0.34%

Source: NVD + CISA KEV + EPSS · Published 2026-08-18 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects versions of the Subscriber User Registration plugin up to 5.2.6, allowing for broken authentication during the registration process. This flaw could enable unauthorized access to user accounts, potentially compromising sensitive information. Organizations using this plugin should prioritize patching to mitigate the risk of account takeovers and data breaches.

CVE
CVE-2026-73995
Severity
MEDIUM
CVSS
5.4
EPSS
0.34%

Original NVD Description

Subscriber Broken Authentication in User Registration <= 5.2.6 versions.