Skip to contentWpeverest User Registration vulnerabilities
- themegrill user registrationWordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerabilityCVE-2026-1195225.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerabilityCVE-2026-1242585.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerabilityCVE-2026-1208404.3 Medium
- wpeverest user registrationWordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-270616.5 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerabilityCVE-2026-254505.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.3.0 - Content Injection vulnerabilityCVE-2026-254675.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart TagCVE-2026-927988.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()CVE-2026-929784.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field ValueCVE-2026-966607.2 High
- wpeverest user registration pro – custom registration form, login form, and user profile wordpress pluginUser Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer HeaderCVE-2026-871117.2 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_nameCVE-2026-152225.4 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1058826.5 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityCVE-2026-1096927.1 High
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityCVE-2026-1096995.4 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerabilityCVE-2026-1065985.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1058816.5 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1030765.4 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityCVE-2026-1065975.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerabilityCVE-2026-963345.6 Medium
- wpeverest user registrationWordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerabilityCVE-2026-740175.3 Medium
- wpeverest user registration & membership proWordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerabilityCVE-2026-740019.8 Critical
- wpeverest user registrationWordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerabilityCVE-2026-739955.4 Medium
- wpeverest user registrationWordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerabilityCVE-2026-734035.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerabilityCVE-2026-527016.5 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment BypassCVE-2026-18696.5 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerabilityCVE-2026-254257.5 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' ParameterCVE-2026-76515.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' ParameterCVE-2026-6145Public exploit5.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content ModificationCVE-2026-36014.3 Medium
- wpeverest user registration advanced fieldsUser Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File UploadCVE-2026-4882Public exploit9.8 Critical
- wpeverest user registrationWordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-426527.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' ParameterCVE-2026-62036.1 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]CVE-2026-18656.5 Medium
- wpeverest user registrationWordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerabilityCVE-2026-32488Public exploit8.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule ManipulationCVE-2026-40565.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership RegistrationCVE-2026-1492Public exploitEPSS 28.9%9.8 Critical
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Authentication BypassCVE-2026-17798.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User DeletionCVE-2026-23565.3 Medium
- wpeverest user registrationWordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerabilityCVE-2026-243534.3 Medium
- wpeverest user registrationWordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerabilityCVE-2025-679568.2 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post DeletionCVE-2025-149765.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Sc…CVE-2025-133676.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL InjectionCVE-2025-90854.9 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict ShortcodeCVE-2025-68316.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User DeletionCVE-2025-32815.3 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-394007.1 High
- wpeverest user registration pro – custom registration form, login form, and user profile wordpress pluginUser Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile <= 5.1.3 - Cross-Site Request Forgery to User DeletionCVE-2025-32844.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership ModificationCVE-2025-32825.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password UpdateCVE-2025-32924.3 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-308995.9 Medium
- Show olderLoading…