Skip to contentWpeverest User Registration vulnerabilities
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-394007.1 High
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.3 - Authentication BypassCVE-2025-2594Public exploit8.1 High
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.2- Unauthenticated Privilege EscalationCVE-2025-2563Public exploitEPSS 49.1%8.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership ModificationCVE-2025-32825.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password UpdateCVE-2025-32924.3 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-308995.9 Medium
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site ScriptingCVE-2025-15116.1 Medium
- wpeverest user registrationWordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerabilityCVE-2023-294295.3 Medium
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationCVE-2024-24178.8 High
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerabilityCVE-2023-274597.4 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site ScriptingCVE-2024-17204.7 Medium
- unknown user registrationUser Registration < 3.0.4.2 - Admin+ Stored XSSCVE-2023-52284.8 Medium
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2023-33429.9 Critical
- wpeverest user registration, user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder +1 moreUser Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object InjectionCVE-2023-33438.8 High
- wpeverest user registrationWordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239875.9 Medium
- unknown user registrationUser Registration < 2.2.4.1 - Subscriber+ Arbitrary File UploadCVE-2022-39127.5 High
- wpeverest user registration, unknown user registration – custom registration form, login and user profile for wordpress +1 moreUser Registration < 2.0.2 - Low Privilege Stored Cross-Site ScriptingCVE-2021-246545.4 Medium