Question 1

What is CVE-2026-110527 — CVE-2026-110527?

Accepted Answer

The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, allowing unauthenticated users to create functional accounts without completing payment.

Question 2

What is the authoritative source for CVE-2026-110527?

Accepted Answer

CVE-2026-110527 (CVE-2026-110527) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-110527CVE-2026-110527

Description

Scoring