EUVD-2026-112876
GHSA-7pxr-w2fg-v389
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify site running User Registration ≤5.3.0
-
ExploitSend request to under-protected plugin function
-
ExecutionBypass missing authorization check
-
ImpactPerform unauthorized low-integrity modification
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a WordPress site with the ThemeGrill User Registration plugin installed at version 5.3.0 or earlier. Per CVSS PR:N/UI:N/AV:N, no authentication or user interaction is needed, so it is reachable against default installations over the network. The specific feature, endpoint, or configuration that triggers the missing authorization check is not described in the available sources, and impact is confined to LOW integrity (C:N/A:N) - meaning no data disclosure or denial of service, which limits realistic severity. The primary limiting factor is simply having the vulnerable plugin version deployed. |
| Impact | This is a moderate-severity broken access control / missing authorization issue (CWE-862) in the ThemeGrill User Registration WordPress plugin, scored CVSS 5.3. The provided CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) indicates a network-reachable, low-complexity, unauthenticated flaw with no user interaction, but limited to a LOW integrity impact only - no confidentiality or availability impact. The signals are consistent and point to a real-but-bounded risk rather than a critical emergency: the vuln.today Decision label is 'this_month' (not act_now/emergency), there is NO CISA KEV listing, and no EPSS score was supplied in the input. No SSVC decision parameters (automatable/technical impact) were provided either. The single reference is the Patchstack advisory/database entry, not a working exploit; no public exploit was identified at time of analysis. Net: a genuine unauthenticated access-control weakness worth patching on a normal cycle, but the LOW integrity-only impact and absence of KEV/EPSS/exploit signals argue against treating it as a drop-everything priority. The exact triggering mechanism is not described in the available sources, so the concrete data an attacker could tamper with is unverified. |
| Exploit ScenarioDerived | A remote, unauthenticated attacker sends crafted requests to a WordPress site running the vulnerable User Registration plugin (≤5.3.0) to reach functionality that should be access-controlled, leveraging the missing authorization check to perform an action or modify data they should not be permitted to (limited to a low integrity impact). No public exploit code was identified at time of analysis, and the specific triggering endpoint is not described in the available sources. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 29, 2026
Missing authorization in ThemeGrill User Registration through 5.3.0 allows unauthenticated remote attackers to perform limited unauthorized modifications on affected WordPress sites, with no confidentiality or availability impact. The issue is a CWE-862 broken access control flaw scored CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/C:N/I:L/A:N), and the exact vulnerable feature or endpoint is not described in the available sources. No CISA KEV listing or public exploit code is identified in the supplied data, and the reported priority is this_month.
RemediationAI
No vendor-released patch or fixed version is identified in the available data; the supplied reference is the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-3-0-broken-access-control-vulnerability?_s_id=cve. Until a patched User Registration release is confirmed, disable or remove the plugin; if registration functionality must remain online, restrict access to the plugin's routes and endpoints at the web server or WAF, accepting that legitimate registration flows may break and require allowlisting. Audit recent user account or plugin-related changes for unauthorized modifications consistent with the LOW integrity impact, and apply the vendor update once a fixed version is published. The priority label is this_month; no CISA KEV or public exploit code is identified in the supplied data, so emergency action is not indicated by those signals.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
ThemeGrill User Registration is a WordPress plugin; the CPE cpe:2.3:a:themegrill:user_registration:* identifies the plugin, and ENISA EUVD lists affected versions as User Registration 0 through 5.3.0. CWE-862 covers missing authorization checks, so an action that should be gated by a capability, role, or nonce can be reached without the intended access-control decision. The CVSS vector shows a network-reachable, low-complexity issue requiring no privileges or user interaction, but only LOW integrity impact (C:N/I:L/A:N), meaning the assessment does not support data disclosure or denial of service. The specific feature, endpoint, or configuration that lacks the authorization check is not described in the available sources; public tags label the issue as an authentication bypass and as affecting User Registration.
Know when User Registration gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Missing authorization reachable remotely without auth or interaction (AV:N/AC:L/PR:N/UI:N); impact limited to low integrity with no confidentiality or availability effect per the advisory.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
DescriptionCVE.org
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in User Registration
View allThe User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and
The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX ac
The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url val
The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1
The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could all
A privilege escalation vulnerability exists in the wpeverest User Registration WordPress plugin through version 4.4.9 du
Unauthenticated availability-impacting broken access control affects the ThemeGrill User Registration WordPress plugin v
Reflected cross-site scripting in the wpeverest User Registration plugin for WordPress (all versions up to and including
Authenticated low-privilege users can exploit missing authorization checks in the ThemeGrill User Registration plugin (v
Cross-site scripting (CWE-79) in the WPEverest 'User Registration' plugin for WordPress, affecting versions up to and in
Stored cross-site scripting in the ThemeGrill User Registration WordPress plugin (versions through 5.2.8) lets an authen
The User Registration & Membership - Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln
Exploit-DB