CVE-2026-25450

The ThemeGrill User Registration WordPress plugin (versions

WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by elba.code in WordPress Plugin User Registration versions = 5.3.0...

WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability

Content Injection vulnerability discovered by Filip Kowalski in WordPress Plugin User Registration versions = 5.3.0...

WordPress User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin User Registration versions = 5.2.8...

WordPress User Registration & Membership: Cross-site Script Vulnerabilities

WordPress User Registration & Membership versions 5.2.8 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for checkbox field values. Additionally, the userregistrationuserformsubmit AJAX operation does not perform...

WordPress User Registration & Membership Code Injection Vulnerability

WordPress User Registration & Membership versions 5.2.8 and earlier have a code injection vulnerability. This vulnerability stems from insufficient input cleaning of the referrerurl parameter, which may allow unauthenticated attackers to execute arbitrary registered shortcodes...

WordPress User Registration & Membership Cross-Site Request Forgery Vulnerability

WordPress User Registration & Membership versions 5.2.8 and earlier have a cross-site request forgeing vulnerability. This vulnerability stems from a lack of proper nonce validation in the triggerbulkaction function. Attackers can bypass the nonce check in triggerqueryactions by providing an empt...

WordPress User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by andrea bocchetti in WordPress Plugin User Registration & Membership Pro versions = 6.2.9...

WordPress User Registration & Membership plugin <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution via displayname vulnerability discovered by hashiramasenju333 in WordPress Plugin User Registration versions = 5.2.8...

WordPress User Registration & Membership Code Injection Vulnerability

WordPress User Registration & Membership versions 5.2.8 and earlier have a code injection vulnerability. This vulnerability arises from the software failing to properly validate values before executing doshortcode. As a result, authenticated attackers with access at the subscriber level or higher...

CVE-2026-105882 WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-109692

The ThemeGrill User Registration WordPress plugin, versions

WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pr0f in WordPress Plugin User Registration versions = 5.2.8...

WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Anatoly Gorbounov x1will in WordPress Plugin User Registration versions = 5.2.8...

CVE-2026-109699 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by nov1337 in WordPress Plugin User Registration versions = 5.2.8...

CVE-2026-106598

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...

CVE-2026-106598 WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...

WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pr0f in WordPress Plugin User Registration versions = 5.2.8...