CVE-2023-3460

Ultimate Member - Descripción general ¡Bienvenido al repositorio de GitHub de Ultimate Member! Ultimate Member es un potente y flexible plugin de perfiles de usuario y membresía para WordPress, pero a veces los plugins tienen alguna vulnerabilidad y pueden llevar a la compromisión del sitio web...

CVE-2025-2563

CVE-2025-2563 The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account role when the Membership Addon is enabled, leading to a privilege escalation issue and allowing unauthenticated users to gain admin privileges 🔴 Vulnerability Overview...

CVE-2006-0450-phpBB-2.0.15-Multiple-DoS-Vulnerabilities

Neo Security Team NST® - Aviso 15 - 00/00/06 Programa: phpBB 2.0.15 Página principal: http://www.phpbb.com Versiones vulnerables: phpBB 2.0.15 y versiones anteriores Riesgo: ¡¡Alto riesgo!! Impacto: Múltiples vulnerabilidades DoS. Descripción phpBB es un paquete de foros de código abierto de alto...

Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

The Simple User Registration plugin ≤ 6.3 is vulnerable to privilege escalation. It lacks proper restrictions on user meta values during registration. Unauthenticated attackers can exploit this to register as administrators. id: CVE-2025-4334 info: name: Simple User Registration = 6.3 -...

User Registration & Membership WordPress plugin - Open Redirect

User Registration & Membership WordPress plugin = 5.1.4 contains an open redirect caused by insufficient validation of 'redirecttoonlogout' parameter, letting attackers redirect users to malicious external URLs after logout, exploit requires crafted URL. id: CVE-2026-6203 info: name: User...

CVE-2021-22911

CVE-2021-22911 Si ya has registrado un usuario, esto solo restablecerá la contraseña del administrador, y no ambas. Haciendo que el exploit se ejecute mucho más rápido. python3 exploit.py -u test -a [email protected] -t http://chat.rocket.thm -i 10.10.4.24 -p 80...

CVE-2025-13342

CVE-2025-13342 PoC The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthorized modification of arbitrary WordPress options in all versions up to, and including, 3.28.20. This allows attackers to register users and set the default role to administrator. Exploitation becomes...

CVE-2021-33831

Introducción La aplicación se utiliza para rastrear personas según las leyes de infección alemanas para poder rastrear cadenas de infección de COVID-19. Fue creada por un proyecto estudiantil llamado iCampus y se utiliza no solo en la universidad de Wildau sino también en Cottbus-Senftenberg...

codoforum

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3 Listed in: Exploit-db, Cve Mitre and The daily swig While I was searching for a free forum software for our community I found Codoforum. After installing it We Vyshnav Vizz tried a few simple XSS payloads to ensure the security and suddenl...

CVE-2026-96574

The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpufpaymentmethod' parameter in all versions up to, and including, 4.3.12 due to...

CVE-2021-34621

CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Escalada de Privilegios No Autenticada Descripción La funcionalidad de registro de usuarios del plugin permitía suministrar metadatos de usuario arbitrarios, incluido wpcapabilities, durante el registro, lo que permitía a los usuarios registrarse como...

CVE-2026-51788

Aviso de Seguridad: CVE-2026-51788 Vulnerabilidad de Denegación de Servicio DoS en cleverangeauth v0.1.10 ID de CVE: CVE-2026-51788 Estado: Asignado Fecha de descubrimiento: 2026-04-27 Investigador: Aykhan Isgandarli Gravedad: Alta CVSS v3.1: 7.5 Vector CVSS:...

CVE-2026-96334

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...

EUVD-2026-95629

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...

CVE-2026-96334

The ThemeGrill User Registration WordPress plugin (versions

CVE-2026-96334 WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7...

CVE-2025-2563

CVE-2025-2563 — Registro de Usuario y Membresía | Escalada de Administrador de Cadena Completa ██╗ ██╗███████╗███████╗██████╗ ██████╗ ███████╗ ██████╗ ██║ ██║██╔════╝██╔════╝██╔══██╗ ██╔══██╗██╔════╝██╔════╝ ██║ ██║███████╗█████╗ ██████╔╝ ██████╔╝█████╗ ██║ ███╗ ██║ ██║╚════██║██╔══╝ ██╔══██╗...

XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...