WordPress User Verification by PickPlugins plugin < 2.0.49 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin User Verification versions 2.0.49...

WordPress User Registration & Membership plugin < 5.3.2 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Maciek Komorowski in WordPress Plugin User Registration versions 5.3.2...

WordPress User Registration & Membership plugin < 5.3.2 - Unauthenticated Payment Before Login Bypass vulnerability

Unauthenticated Payment Before Login Bypass vulnerability discovered by Filip Kecman in WordPress Plugin User Registration versions 5.3.2...

WordPress User Registration & Membership plugin < 5.3.2 - Subscriber+ Payment Bypass vulnerability

Subscriber+ Payment Bypass vulnerability discovered by Wai Linn Oo in WordPress Plugin User Registration versions 5.3.2...

WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tai Nguyen in WordPress Plugin User Registration versions = 5.3.1...

CVE-2026-124258

The ThemeGrill User Registration WordPress plugin (versions

WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ssophiz in WordPress Plugin User Registration versions = 5.3.1...

CVE-2026-120840 WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0...

WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by fccsec.dev in WordPress Plugin User Registration versions = 5.3.0...

WordPress User Frontend permission and access control issues vulnerability

WordPress User Frontend versions 4.3.13 and earlier contain a permission and access control vulnerability. This flaw stems from improper handling of the postcontent parameter in the submitpost function. Attackers can inject the short code wpuf-registration containing \x01 bytes to bypass blacklis...

WordPress User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Kuba in WordPress Plugin WP User Frontend versions = 4.3.13...

CVE-2026-25450

The ThemeGrill User Registration WordPress plugin (versions

CVE-2026-25450 WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0...

WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by elba.code in WordPress Plugin User Registration versions = 5.3.0...

WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability

Content Injection vulnerability discovered by Filip Kowalski in WordPress Plugin User Registration versions = 5.3.0...

WordPress User Frontend authorization issue vulnerability

WordPress User Frontend versions 4.3.13 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks and can be exploited to bypass improperly configured access control settings, resulting in improper access management...

WordPress User Registration & Membership authorization issue vulnerability

WordPress User Registration & Membership versions 5.3.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

WordPress User Profile Builder authorization issue vulnerability

WordPress User Profile Builder versions 4.0.5 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control settings...

WordPress User Frontend authorization issue vulnerability

WordPress User Frontend versions 4.3.13 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may allow attackers to exploit improperly configured access control levels...

WordPress User Registration & Membership Cross-site Scripting Vulnerability

WordPress User Registration & Membership versions 5.3.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper handling of script-related HTML tags within web pages, potentially leading to code injection...