EUVD-2026-57916
GHSA-qmg3-qgp8-h6mx
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Network-accessible without authentication (AV:N/PR:N), low complexity, no user interaction; only limited integrity impact with no confidentiality or availability effect described.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Lifecycle Timeline
1DescriptionCVE.org
Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.
AnalysisAI
Broken access control in the WPEverest User Registration WordPress plugin (versions ≤5.2.6) permits unauthenticated remote attackers to bypass authorization checks and perform unauthorized actions within the registration subsystem, yielding limited integrity impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms exploitation requires no authentication, no user interaction, and no special configuration, though impact is constrained to integrity modifications with no confidentiality or availability effect. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The WPEverest User Registration plugin version 5.2.6 or earlier must be installed and active on the WordPress site. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 5.3 Medium score reflects a meaningful but bounded threat: the attack is fully network-accessible with no prerequisites (AV:N/AC:L/PR:N/UI:N), yet impact is limited to integrity (I:L) with no confidentiality or availability consequence. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker sends a crafted HTTP POST or GET request directly to a vulnerable registration endpoint exposed by the plugin - such as an unprotected AJAX action or REST route - bypassing the missing authorization gate (CWE-862). The server processes the request as if it were legitimately authorized, allowing the attacker to manipulate registration-related data or trigger restricted registration actions. … |
| Remediation | Update the User Registration plugin to a version beyond 5.2.6 - the exact patched release should be confirmed via the WordPress.org plugin repository changelog or the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-2-6-broken-access-control-vulnerability?_s_id=cve, as a specific fixed version number is not confirmed from the available intelligence. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in User Registration
View allThe User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and
The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX ac
The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url val
The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1
The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could all
A privilege escalation vulnerability exists in the wpeverest User Registration WordPress plugin through version 4.4.9 du
Unauthenticated availability-impacting broken access control affects the ThemeGrill User Registration WordPress plugin v
Reflected cross-site scripting in the wpeverest User Registration plugin for WordPress (all versions up to and including
The User Registration & Membership - Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln
Broken authentication in WPEverest's User Registration WordPress plugin (versions 5.2.6 and below) permits subscriber-le
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today