WordPress User Registration & Membership plugin < 5.2.6 - Unauthenticated Account Creation While Registration Disabled vulnerability

Unauthenticated Account Creation While Registration Disabled vulnerability discovered by Nguyễn Đức Hòa in WordPress Plugin User Registration versions 5.2.6...

CVE-2025-2563

CVE-2025-2563 — User Registration & Membership | Escalonamento de Administrador em Cadeia Completa root@kitploit: ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║...

EUVD-2026-64824

A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function moveuploadedfile of the file allusers/register.php of the component User Registration. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack may be launched remotely. T...

CVE-2026-78245 itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload

A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function moveuploadedfile of the file allusers/register.php of the component User Registration. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack may be launched remotely. T...

CVE-2026-78245

itsourcecode Online Pharmacy System 1.0 is affected by an unrestricted file upload vulnerability in the User Registration component. The flaw resides in the move_uploaded_file function within all_users/register.php, where manipulation of the photo argument allows a remote, unauthenticated attacke...

PT-2026-80802

Name of the Vulnerable Software and Affected Versions itsourcecode Online Pharmacy System version 1.0 Description An unrestricted file upload flaw exists in the User Registration component. A remote attacker can manipulate the photo argument within the move uploaded file function in the 'all...

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

EUVD-2026-63314

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-74001

User Registration & Membership Pro is a WordPress plugin affected by an unauthenticated broken authentication vulnerability in versions ≤ 5.4.5 , enabling account takeover without any prior credentials. The flaw was discovered by 0xd4rk5id3 and carries a CVSS 3.1 score of 9.8 (CRITICAL) with a ne...

CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-73995

Subscriber Broken Authentication in User Registration = 5.2.6 versions...

EUVD-2026-60809

Subscriber Broken Authentication in User Registration = 5.2.6 versions...

CVE-2026-73995 WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

Subscriber Broken Authentication in User Registration = 5.2.6 versions...

CVE-2026-73995

The WordPress User Registration plugin (versions ≤ 5.2.6) has a broken authentication flaw allowing subscribers to bypass access controls; CVSS 5.4 (MEDIUM). CISA SSVC reports no active exploitation. No exploit code is provided; upgrade beyond 5.2.6 to remediate. Details via Patchstack reference.

WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by DmTomHe in WordPress Plugin User Registration versions = 5.2.6...

CVE-2026-73403

Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...

EUVD-2026-57916

Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...

CVE-2026-73403 WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...

CVE-2026-73403

The CVE-2026-73403 entry concerns the WordPress User Registration plugin (versions ≤ 5.2.6) with unauthenticated broken access control in its registration flow. Affected software: WordPress User Registration plugin; vulnerable component: registration/authentication logic described as enforcing br...

WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ziming Zhang in WordPress Plugin User Registration versions = 5.2.6...