CVE-2026-10782

The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to grant themselves any premium membership tier without completing a PayPal transaction, generating a falsified active payment receipt and gaining unauthorized access to restricted property listing allowances.

• CWE-862

• https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.7/resources/payment-handler/class-paypal-payment-handler.php#L351
• https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.7/resources/payment-handler/class-paypal-payment-handler.php#L364
• https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.7/resources/payment-handler/payment-handler-init.php#L82
• https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.9/resources/payment-handler/class-paypal-payment-handler.php#L351
• https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.9/resources/payment-handler/class-paypal-payment-handler.php#L364
• https://plugins.trac.wordpress.org/browser/inspiry-memberships/tags/3.0.9/resources/payment-handler/payment-handler-init.php#L82
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3617226%40inspiry-memberships&new=3617226%40inspiry-memberships
• https://www.wordfence.com/threat-intel/vulnerabilities/id/16187b39-9b3a-4b1c-806c-37b62483a719?source=cve

Published

Aug 1, 2026

Last Modified

Aug 12, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10774Zephyr's Bluetooth Mesh subnet key management leaks one PSA …6.5
• CVE-2026-10775A vulnerability was determined in sgl-project SGLang up to 0…5.3
• CVE-2026-10777A vulnerability was identified in ealpha072 Student-Manageme…7.3
• CVE-2026-10779The Classified Listing – Classified ads & Business Directory…4.3
• CVE-2026-1078An arbitrary file-write vulnerability in Pega Browser Extens…7.2
• CVE-2026-10780The Static Block plugin for WordPress is vulnerable to Insec…4.3
• CVE-2026-10783A security flaw has been discovered in gradio-app gradio 6.1…2.5
• CVE-2026-10786Improper access control in the ticketing integration setting…6.5
• CVE-2026-10787Missing authorization in the deleted user groups API in Devo…4.3
• CVE-2026-10789A maliciously crafted webpage, when visited by a user with A…9.6
• CVE-2026-1079A native messaging host vulnerability in Pega Browser Extens…6
• CVE-2026-10795The UpdraftPlus: WP Backup & Migration Plugin plugin for Wor…8.1