CVE-2026-81422: 
WordPress 脆弱性分析と緩和策

The plugin does not verify the site's user-registration setting before creating accounts through a publicly accessible shortcode, allowing unauthenticated attackers to register arbitrary user accounts, and be automatically logged in, even when user registration is disabled on the site.