{"api_version":"1","generated_at":"2026-11-11T06:59:16+00:00","cve":"CVE-2026-123661","urls":{"html":"https://cve.report/CVE-2026-123661","api":"https://cve.report/api/cve/CVE-2026-123661.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-123661","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-123661"},"summary":{"title":"ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout","description":"The ProfilePress  WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role.","state":"PUBLISHED","assigner":"WPScan","published_at":"2026-11-11 06:17:18","updated_at":"2026-11-11 06:17:18"},"problem_types":["CWE-862 Missing Authorization"],"metrics":[],"references":[{"url":"https://wpscan.com/vulnerability/e70de446-003c-4198-9951-e0fb336978f8/","name":"https://wpscan.com/vulnerability/e70de446-003c-4198-9951-e0fb336978f8/","refsource":"contact@wpscan.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-123661","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123661","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Unknown","product":"ProfilePress","version":"affected 4.16.13 4.17.4 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Karthik Ramakrishnan","lang":"en"},{"source":"CNA","value":"WPScan","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"ProfilePress","vendor":"Unknown","versions":[{"lessThan":"4.17.4","status":"affected","version":"4.16.13","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"Karthik Ramakrishnan"},{"lang":"en","type":"coordinator","value":"WPScan"}],"descriptions":[{"lang":"en","value":"The ProfilePress  WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role."}],"problemTypes":[{"descriptions":[{"description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-11T06:00:13.295Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan"},"references":[{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/e70de446-003c-4198-9951-e0fb336978f8/"}],"source":{"discovery":"EXTERNAL"},"title":"ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership Plan Subscription via Plan-Change Checkout","x_generator":{"engine":"WPScan CVE Generator"}}},"cveMetadata":{"assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","assignerShortName":"WPScan","cveId":"CVE-2026-123661","datePublished":"2026-11-11T06:00:13.295Z","dateReserved":"2026-11-06T09:01:42.099Z","dateUpdated":"2026-11-11T06:00:13.295Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-11 06:17:18","lastModifiedDate":"2026-11-11 06:17:18","problem_types":["CWE-862 Missing Authorization"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"123661","Ordinal":"1","Title":"ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership ","CVE":"CVE-2026-123661","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"123661","Ordinal":"1","NoteData":"The ProfilePress  WordPress plugin before 4.17.4 does not check that a membership plan is still active when checkout is used to change an existing subscription, allowing subscribers holding any subscription of their own to subscribe to plans the site owner has deactivated, including free plans that grant a user role.","Type":"Description","Title":"ProfilePress 4.16.13 - 4.17.3 - Subscriber+ Inactive Membership "}]}}}