2603 matches found
CVE-2026-15222
The User Registration & Membership plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to and including 5.2.8 . The root cause is a failure to properly validate values before processing the do_shortcode function. This allows authenticated attackers with subscrib...
PT-2026-115527
Name of the Vulnerable Software and Affected Versions User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin versions prior to 6.3.0 Description The premium build of the plugin contains a flaw due to insufficient input sanitization and output escaping. Thi...
WordPress User Registration & Membership plugin <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name vulnerability
Authenticated Subscriber+ Arbitrary Shortcode Execution via displayname vulnerability discovered by hashiramasenju333 in WordPress Plugin User Registration versions = 5.2.8...
WP-CVE-2025-6934
WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Unauthenticated Privilege Escalation This is a Python script that exploits the CVE-2025-6934 vulnerability in the Opal Estate Pro = 1.7.5 plugin for WordPress. This tool allows unauthenticated attackers to register new users and escalate their privileg...
CVE-2026-109692
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...
CVE-2026-105882
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...
CVE-2026-105882
The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue stems from the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts that are stored on...
EUVD-2026-102049
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...
CVE-2026-105882 WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...
CVE-2026-109692
The ThemeGrill User Registration WordPress plugin, versions
CVE-2026-109692 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...
EUVD-2026-102027
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...
WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pr0f in WordPress Plugin User Registration versions = 5.2.8...
WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Anatoly Gorbounov x1will in WordPress Plugin User Registration versions = 5.2.8...
CVE-2026-109699
The ThemeGrill User Registration WordPress plugin (versions
WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by nov1337 in WordPress Plugin User Registration versions = 5.2.8...
CVE-2026-106598
The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...
WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...
CVE-2026-105881
The ThemeGrill User Registration plugin (user-registration) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions from n/a through 5.2.8 . The root cause is the Improper Neutralization of Input During Web Page Generation (CWE-79). This vulnerability allows an attacker to in...
WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pr0f in WordPress Plugin User Registration versions = 5.2.8...