CVE-2026-114451: Kadence Memberships < 4.0.6 - Unauthenticated Table Collation Downgrade via 'rcp-action' Parameter

Q: Who can trigger the database change?

Any unauthenticated user can trigger the schema-altering maintenance routine because it lacks both authorization and CSRF checks.

Q: What data is affected by the character-set downgrade?

The plugin's membership level, discount code, and payment records are affected. Four-byte characters, including emoji and some CJK characters, are irreversibly replaced with question marks.

Q: How can I determine whether my site is vulnerable?

Sites using the Membership Plugin WordPress plugin before version 4.0.6 are affected. Review the affected records for unexpected question marks where four-byte characters were previously stored.

Published Nov 15, 2026

Updated

The Membership Plugin WordPress plugin before 4.0.6 does not perform any authorization or CSRF check before running a schema-altering database maintenance routine, allowing unauthenticated users to convert the Membership Plugin WordPress plugin before 4.0.6's own tables to a narrower character set, which irreversibly replaces every 4-byte character (such as emoji and some CJK characters) in the membership level, discount code and payment records with a question mark.

Affected Software

0 affected components

Event History

Nov 15, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:16 AM

Description

Frequently Asked Questions

Who can trigger the database change?

Any unauthenticated user can trigger the schema-altering maintenance routine because it lacks both authorization and CSRF checks.

What data is affected by the character-set downgrade?

The plugin's membership level, discount code, and payment records are affected. Four-byte characters, including emoji and some CJK characters, are irreversibly replaced with question marks.

How can I determine whether my site is vulnerable?

Sites using the Membership Plugin WordPress plugin before version 4.0.6 are affected. Review the affected records for unexpected question marks where four-byte characters were previously stored.

CVE-2026-114451: Kadence Memberships < 4.0.6 - Unauthenticated Table Collation Downgrade via 'rcp-action' Parameter

Affected Software

Event History

Frequently Asked Questions

Who can trigger the database change?

What data is affected by the character-set downgrade?

How can I determine whether my site is vulnerable?

Company

Resources

Contact

Frequently Asked Questions

Who can trigger the database change?

What data is affected by the character-set downgrade?

How can I determine whether my site is vulnerable?