CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalada de Privilégios Não Autenticada via Registro de Associação 🔴 Visão Geral da Vulnerabilidade CVE-2026-1492 — Escalada de Privilégios Não Autenticada via Registro de Associação Descrição: O plugin User Registration & Membership para...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Advisory 15 - 00/00/06 Programm: phpBB 2.0.15 Homepage: http://www.phpbb.com Verwundbare Versionen: phpBB 2.0.15 & niedrigere Versionen Risiko: Hohes Risiko!! Auswirkung: Mehrere DoS-Sicherheitslücken. Beschreibung phpBB ist ein leistungsstarkes, voll skalierbares und...

CVE-2025-4334

🔓 Simple User Registration = 6.3 – Unauthenticated Privilege Escalation 📄 Beschreibung Das Simple User Registration Plugin für WordPress ist in allen Versionen bis einschließlich 6.3 anfällig für Privilege Escalation. Grund dafür sind unzureichende Einschränkungen bei Benutzer-Meta-Werten, die...

CVE-2025-2563

CVE-2025-2563 O plugin User Registration & Membership para WordPress anterior à versão 4.1.2 não impede que os usuários definam a função de suas contas quando o Membership Addon está habilitado, levando a um problema de escalonamento de privilégios e permitindo que usuários não autenticados...

CVE-2026-36227

CVE-2026-36227: PoC de Path Traversal no UserName do Easy Chat Server 3.1 Este repositório contém uma prova de conceito benigna para CVE-2026-36227, um problema de path traversal no tratamento de registro de usuários do Easy Chat Server 3.1. Este repositório destina-se apenas a pesquisa de...

WordPress User Registration & Membership plugin < 5.2.6 - Authenticated Privilege Escalation vulnerability

Authenticated Privilege Escalation vulnerability discovered by Artus KG in WordPress Plugin User Registration versions 5.2.6...

EUVD-2026-67683

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

CVE-2026-81732

WWBN AVideo through version 30.0 contains an information disclosure vulnerability caused by missing authentication on the report4.json.php and report4.1.json.php endpoints. An unauthenticated attacker can issue GET requests to retrieve daily and cumulative user-registration counts without any ses...

CVE-2021-34621-EXPLOIT

CVE-2021-34621 - Escalation dei privilegi di WordPress È stata identificata una vulnerabilità critica nel componente di registrazione utente del plugin WordPress ProfilePress. Questa falla di sicurezza, identificata come CVE-2021-34621, consente a utenti non autorizzati di registrarsi su siti web...

WP-CVE-2025-6934

WP-CVE-2025-6934 | Opal Estate Pro = 1.7.5 - Escalation dei Privilegi non Autenticata Questo è uno script Python che sfrutta la vulnerabilità CVE-2025-6934 nel plugin Opal Estate Pro = 1.7.5 per WordPress. Questo strumento consente ad attaccanti non autenticati di registrare nuovi utenti e di...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Nicht authentifizierte Privilegieneskalation Dies ist ein Python-Skript, das die Schwachstelle CVE-2024-6624 im Plugin JSON API User = 3.9.3 für WordPress ausnutzt. Dieses Tool ermöglicht es nicht authentifizierten Angreifern, neue Benutzer zu registrieren...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership for WordPress: Unauthenticated Admin Approval Bypass Proof-of-concept-Exploit für CVE-2026-6145 , eine Fehlstelle in der Autorisierung des Plugins User Registration & Membership für WordPress ≤ 5.1.5, die es nicht authentifizierten Angreifern...

CVE-2026-79995

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

CVE-2026-79996

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

WordPress User Registration & Membership plugin < 5.2.5 - Subscriber+ Pending Email Change Cancellation vulnerability

Subscriber+ Pending Email Change Cancellation vulnerability discovered by Sai Praneeth Koti in WordPress Plugin User Registration versions 5.2.5...

EUVD-2026-67575

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

EUVD-2026-67574

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

CVE-2026-79996

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...

CVE-2026-79995 User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...

CVE-2026-79995

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email change is being cancelled belongs to the user making the request, allowing authenticated users with Subscriber-level access and above to cancel any other user's in-progress email...