CVE-2025-4334

🔓 Simple User Registration = 6.3 - Escalata dei Privilegi Non Autenticata 📄 Descrizione Il plugin Simple User Registration per WordPress è vulnerabile all'Escalata dei Privilegi in tutte le versioni fino alla 6.3 inclusa. Ciò è dovuto a insufficienti restrizioni sui metadati utente che possono...

WordPress User Registration & Membership plugin < 5.2.6 - Authenticated Privilege Escalation vulnerability

Authenticated Privilege Escalation vulnerability discovered by Artus KG in WordPress Plugin User Registration versions 5.2.6...

CVE-2026-81732

WWBN AVideo through version 30.0 contains an information disclosure vulnerability caused by missing authentication on the report4.json.php and report4.1.json.php endpoints. An unauthenticated attacker can issue GET requests to retrieve daily and cumulative user-registration counts without any ses...

EUVD-2026-67683

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

CVE-2021-34621-EXPLOIT

CVE-2021-34621 - Escalation dei privilegi di WordPress È stata identificata una vulnerabilità critica nel componente di registrazione utente del plugin WordPress ProfilePress. Questa falla di sicurezza, identificata come CVE-2021-34621, consente a utenti non autorizzati di registrarsi su siti web...

WP-CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Escalation dei Privilegi non Autenticata Questo è uno script Python che sfrutta la vulnerabilità CVE-2025-6934 nel plugin Opal Estate Pro = 1.7.5 per WordPress. Questo strumento consente ad attaccanti non autenticati di registrare nuovi utenti e di...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership for WordPress: Unauthenticated Admin Approval Bypass Proof-of-concept-Exploit für CVE-2026-6145 , eine Fehlstelle in der Autorisierung des Plugins User Registration & Membership für WordPress ≤ 5.1.5, die es nicht authentifizierten Angreifern...

CVE-2026-79995

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

CVE-2026-79996

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

CVE-2026-79996

The User Registration & Membership WordPress plugin versions before 5.2.6 lack a capability check when saving login settings. An authenticated user with the plugin's management capability (but not full administrator access) can modify arbitrary site options to escalate privileges to administrator...

EUVD-2026-67575

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

EUVD-2026-67574

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

WordPress User Registration & Membership plugin < 5.2.5 - Subscriber+ Pending Email Change Cancellation vulnerability

Subscriber+ Pending Email Change Cancellation vulnerability discovered by Sai Praneeth Koti in WordPress Plugin User Registration versions 5.2.5...

CVE-2026-79995

The User Registration & Membership WordPress plugin (versions

CVE-2026-79995 User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

CVE-2026-4882

CVE-2026-4882 User Registration Advanced Fields = 1.6.20 - Caricamento Arbitrario di File Non Autenticato Descrizione : User Registration Advanced Fields = 1.6.20 - Caricamento Arbitrario di File Non Autenticato Il plugin User Registration Advanced Fields per WordPress versioni fino alla 1.6.20...

CVE-2025-2594

CVE-2025-2594 User Registration & Membership = 4.1.2 - Bypass de Autenticação Aviso Legal! As informações apresentadas neste relatório de CVE Common Vulnerabilities and Exposures são apenas para fins educacionais e informativos. Os detalhes fornecidos são baseados em recursos publicamente...

CVE-2025-2563

CVE-2025-2563 User Registration & Membership = 4.1.1 - Escalatazione dei privilegi non autenticata Dichiarazione di non responsabilità! Le informazioni presentate in questo rapporto CVE Common Vulnerabilities and Exposures sono solo a scopo educativo e informativo. I dettagli forniti si basano su...

codoforum

CVE-2020-5842 Stored XSS Schwachstelle in Codoforum 4.8.3 Gelistet in: Exploit-db, Cve Mitre und The daily swig Während ich nach einer kostenlosen Forensoftware für unsere Community suchte, stieß ich auf Codoforum. Nach der Installation haben wir Vyshnav Vizz ein paar einfache XSS-Payloads...

CVE-2021-22911

CVE-2021-22911 Se hai già registrato un utente, questo reimposta solo la password dell'amministratore, e non entrambe. Ciò rende l'exploit molto più veloce. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...