Skip to contentWpeverest User Registration \& Membership vulnerabilities
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-394007.1 High
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.3 - Authentication BypassCVE-2025-2594Public exploit8.1 High
- unknown user registration & membership, wpeverest user registration \& membership +1 moreUser Registration & Membership < 4.1.2- Unauthenticated Privilege EscalationCVE-2025-2563Public exploitEPSS 49.1%8.1 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership ModificationCVE-2025-32825.3 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password UpdateCVE-2025-32924.3 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-308995.9 Medium
- wpeverest user registration, user registration \& membership +1 moreWordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerabilityCVE-2023-274597.4 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builder, user registration \& membership +1 moreUser Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site ScriptingCVE-2024-17204.7 Medium