CVE-2026-87111

The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Referer Header in all versions up to, and including, 6.2.9 due to insufficient input sanitization and output escaping. Thi...

WordPress User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by andrea bocchetti in WordPress Plugin User Registration & Membership Pro versions = 6.2.9...

EUVD-2026-102814

The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Referer Header in all versions up to, and including, 6.2.9 due to insufficient input sanitization and output escaping. Thi...

CVE-2026-87111 User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header

The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Referer Header in all versions up to, and including, 6.2.9 due to insufficient input sanitization and output escaping. Thi...

CVE-2026-87111

The User Registration PRO WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.2.9 . The flaw exists in the premium build of the plugin due to insufficient input sanitization and output escaping when handling the HTTP Referer Header . Unauthent...

CVE-2026-87111: Improper Neutralization of Input During Web Page Generation

The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Referer Header in all versions up to, and including, 6.2.9 due to insufficient input sanitization and output escaping. Thi...

PT-2026-115527

Name of the Vulnerable Software and Affected Versions User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin versions prior to 6.3.0 Description The premium build of the plugin contains a flaw due to insufficient input sanitization and output escaping. Thi...

CVE-2017-20273

Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with...

PT-2026-50954

Name of the Vulnerable Software and Affected Versions Joomla Event Registration Pro Calendar version 4.1.3 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code. This is achieved by sending GET requests to the 'index.php' endpoi...

CVE-2017-20273: Improper Neutralization of Special Elements used in an SQL Command

Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with...

WordPress CM Registration Pro premium plugin <= 3.2.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by WPScan Team in WordPress CM Registration Pro premium plugin versions = 3.2.0. Solution Update the WordPress CM Registration Pro premium plugin to the latest available version at least 3.2.1...

Event Registration Pro,4.1.3,SQL Injection

Event Registration Pro, 4.1.3 and previous, SQL Injection Resolution: update to version 4.1.4 Update notice: https://www.joomlashowroom.com/blog/event-registration-pro-4-1-4-security-release...

Event Registration Pro Calendar Component SQL Injection Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the id parameter in Joomla! Event Registration Pro Calendar, which can be exploited by attackers to access or modify database data...

Joomla Event Registration Pro Calendar 4.1.3 SQL Injection

Exploit Title: Joomla! Component Event Registration Pro Calendar v4.1.3 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://joomlashowroom.com/ Software: https://www.joomlashowroom.com/products/event-registration-pro-calendar Demo: http://demo3.joomlashowroom.com/ Version: 4.1.3 Author:...

Joomla Event Registration Pro Calendar 4.1.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Event Registration Pro Calendar v4.1.3 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://joomlashowroom.com/ Software: https://www.joomlashowroom.com/products/event-registration-pro-calendar Demo:...

Joomla! Component Event Registration Pro Calendar 4.1.3 - SQL Injection

Exploit Title: Joomla! Component Event Registration Pro Calendar v4.1.3 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://joomlashowroom.com/ Software: https://www.joomlashowroom.com/products/event-registration-pro-calendar Demo: http://demo3.joomlashowroom.com/ Version: 4.1.3 Author:...

Joomla com_registrationpro SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comregistrationpro SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comregistrationpro Vendor Homepage : http://www.joomlashowroom.com/ version : 3.2.12 - 3.2.10 Tested on: BACKBOX...

Event Registration Pro,3.2.12 - 3.2.10,SQL Injection

Event Registration Pro,3.2.12 - 3.2.10,SQL Injection resolution: update to 3.2.13 update notice: https://www.joomlashowroom.com/blog/event-registration-pro-3-2-13-released-security-release...

Joomla Registration Pro 3.2.12 SQL Injection

| / \ | \ / | | | | | / | \ / / \ / \ | | | | | | || | | | | | = 5.0 boolean-based blind - Parameter replace Payload: option=comregistrationpro&view=calendar&Itemid=27&...

event registration pro

event registration pro, , SQL Injection UpdateNoticeURL: http://www.joomlashowroom.com/blog/security-and-bug-release-for-all-versions-of-event-registration-pro affects versions prior to 3.0.1 Joomla 3 prior to 2.5.6 Joomla 2.5 prior to 1.5.22 Joomla 1.5...