CVE-2023-3342

🗓️ 13 Jul 2023 02:04:15Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 118 Views🌐 WEB

WordPress User Registration plugin allows arbitrary file uploads up to version 3.0.

Reporter	Title	Published	Views	Family All 17
CNNVD	WordPress plugin User Registration 代码问题漏洞	13 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-3342 User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload	13 Jul 202302:04	–	cvelist
EUVD	EUVD-2023-44010	3 Oct 202520:07	–	euvd
NVD	CVE-2023-3342	13 Jul 202303:15	–	nvd
OSV	CVE-2023-3342	13 Jul 202303:15	–	osv
Packet Storm	WordPress User Registration 3.0.2 Arbitrary File Upload	12 Jul 202300:00	–	packetstorm
Patchstack	WordPress User Registration Plugin <= 3.0.2 is vulnerable to Arbitrary File Upload	4 Jul 202300:00	–	patchstack
Prion	Hardcoded credentials	13 Jul 202303:15	–	prion
Positive Technologies	PT-2023-24339 · WordPress · User Registration	13 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-3342	23 May 202502:15	–	redhatcve

NVD

Vulners

Vulnrichment

Node

wpeverest user_registrationRange<3.0.2.1wordpress

[
  {
    "vendor": "wpeverest",
    "product": "User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.0.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/user-registration/tags/3.0.1/includes/functions-ur-core.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a979e885-f7dd-4616-a881-64f3d97c309d
plugins	www.plugins.trac.wordpress.org/changeset/2933689/user-registration/trunk/includes/functions-ur-core.php
lana	www.lana.codes/lanavdb/c0a58dff-7a5b-4cc0-82d6-2255e61d801c/
packetstormsecurity	www.packetstormsecurity.com/files/173434/WordPress-User-Registration-3.0.2-Arbitrary-File-Upload.html

Parameter	Position	Path	Description	CWE
upload_file	request body	user_registration_profile_pic_upload-http-request	Arbitrary file upload via profile_pic_upload flow enabling upload of crafted files (e.g., PHP payload) due to weak validation and hardcoded encryption key.	CWE-434
upload_files	request body	user_registration_profile_pic_upload-http-request	Arbitrary file upload via profile_pic_upload flow enabling upload of crafted files (e.g., PHP payload) due to weak validation and hardcoded encryption key.	CWE-434
encrypted_data	request body	user_registration_profile_pic_upload-http-request	Arbitrary file upload via profile_pic_upload flow enabling upload of crafted files (e.g., PHP payload) due to weak validation and hardcoded encryption key.	CWE-434
encrypted_data	request body	save_profile_details-http-request	Profile save step accepts manipulated encrypted data to move and rename uploaded file, enabling execution of uploaded payloads after decryption/rename.	CWE-434
filename	request body	save_profile_details-http-request	Profile save step accepts manipulated encrypted data to move and rename uploaded file, enabling execution of uploaded payloads after decryption/rename.	CWE-434
path	request body	save_profile_details-http-request	Profile save step accepts manipulated encrypted data to move and rename uploaded file, enabling execution of uploaded payloads after decryption/rename.	CWE-434
extension	request body	save_profile_details-http-request	Profile save step accepts manipulated encrypted data to move and rename uploaded file, enabling execution of uploaded payloads after decryption/rename.	CWE-434

08 Apr 2026 19:18Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.9

EPSS0.01454

SSVC

CWE-434