User Registration
Monthly
Authenticated low-privilege users can exploit missing authorization checks in the ThemeGrill User Registration plugin (versions up to 5.2.8) to perform unauthorized actions, potentially altering site data or user information. This broken access control flaw (CWE-862) has a CVSS score of 7.1 and requires network access with low complexity, but no user interaction. No public exploit code or active exploitation has been identified at this time.
Unauthenticated availability-impacting broken access control affects the ThemeGrill User Registration WordPress plugin versions 5.1.2 and earlier, allowing remote attackers to invoke privileged actions without credentials. The CVSS 7.5 score (AV:N/AC:L/PR:N/UI:N) reflects pure availability impact (A:H) with no confidentiality or integrity loss, and no public exploit identified at time of analysis. The flaw is classified as CWE-862 Missing Authorization and tracked by Patchstack and ENISA EUVD-2026-36911.
Reflected cross-site scripting in the wpeverest User Registration plugin for WordPress (all versions up to and including 5.1.5) lets remote attackers inject arbitrary JavaScript that executes in a victim's browser when they follow a crafted link. The CVSS scope-change rating (7.1) reflects that injected script can act beyond the vulnerable component, but practical impact is bounded by the privileges of whichever user is lured into clicking. There is no public exploit identified at time of analysis, EPSS risk is negligible (0.03%, 10th percentile), and CISA SSVC records no known exploitation.
A privilege escalation vulnerability exists in the wpeverest User Registration WordPress plugin through version 4.4.9 due to incorrect privilege assignment (CWE-266). This flaw allows authenticated or unauthenticated attackers to escalate their privileges within the plugin, potentially gaining administrative access or elevated capabilities. No CVSS score, EPSS data, or KEV status has been published, limiting quantification of real-world exploitation risk, though the vulnerability was reported by Patchstack and affects all installations running version 4.4.9 or earlier.
Cross-site scripting (CWE-79) in the WPEverest 'User Registration' plugin for WordPress, affecting versions up to and including 5.3.0, allows an attacker holding a subscriber-level account to inject script that executes in a victim's browser session, scoring CVSS 6.5. Exploitation is constrained: the attacker must be an authenticated subscriber (PR:L, which presupposes that user registration is enabled on the target site), a victim must view the injected content (UI:R), and the resulting impact lands in the victim's browser context rather than the server (S:C). No public exploit code has been identified at time of analysis, and the flaw is not in CISA KEV; the vuln.today decision label is 'this_month', indicating scheduled rather than emergency remediation.
Missing authorization in ThemeGrill User Registration through 5.3.0 allows unauthenticated remote attackers to perform limited unauthorized modifications on affected WordPress sites, with no confidentiality or availability impact. The issue is a CWE-862 broken access control flaw scored CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/C:N/I:L/A:N), and the exact vulnerable feature or endpoint is not described in the available sources. No CISA KEV listing or public exploit code is identified in the supplied data, and the reported priority is this_month.
Basic cross-site scripting (XSS) in ThemeGrill User Registration through 5.3.0 allows remote attackers to inject script-related HTML/content into pages served by affected WordPress sites. Sites running the vulnerable plugin version are affected, and the independent assessment rates this medium severity (CVSS 5.3) with limited impact and no availability effect indicated. The supplied intelligence shows no confirmed active exploitation (CISA KEV) and no public exploit identified at time of analysis.
ThemeGrill's User Registration WordPress plugin (versions up to and including 5.2.8) fails to enforce authorization checks on one of its endpoints, letting a low-privilege authenticated user perform actions that should be restricted. Exploitation requires a valid session (CVSS PR:L), but because the plugin's core purpose is open self-service registration, an attacker can typically create the necessary account themselves - no user interaction is needed and the attack is remote and low-complexity. Impact is limited to integrity and availability of the affected functionality (I:L/A:L, no confidentiality impact), rated CVSS 5.4; no public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
WordPress sites running the ThemeGrill User Registration plugin through version 5.2.8 can be queried by unauthenticated remote attackers to retrieve embedded sensitive data, because a missing authorization check (CWE-862) leaves a data-exposing code path reachable without any privilege. Per the assessed CVSS vector (AV:N/AC:L/PR:N/UI:N), no authentication, user interaction, or non-default configuration is required, and the impact is confined to Low confidentiality with no integrity or availability effect - the attacker gains read access to specific exposed data rather than full account or site compromise. Exploitation is limited to sites that have not upgraded past 5.2.8, and there is no public exploit identified at time of analysis and no confirmation of active exploitation (not listed in CISA KEV); this is a routine patch-management item rather than an emergency.
Stored cross-site scripting in the ThemeGrill User Registration WordPress plugin (versions through 5.2.8) lets an authenticated low-privilege user - realistically anyone who can complete the plugin's own self-service sign-up form when open registration is enabled - persist malicious script into plugin-stored data that later renders in a victim's browser. The payload only fires when a higher-privileged user, typically an administrator reviewing registrations or user records, loads the affected page, so exploitation requires that human view-step and is not automatable against an idle target; CVSS is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and because the flaw is scope-changing it can affect resources beyond the plugin's own security context.
Cross-site request forgery (CSRF) in the ThemeGrill User Registration WordPress plugin through version 5.2.8 allows remote attackers to trick a logged-in privileged user into performing unintended actions, with low integrity and availability impact (CVSS 5.4). Exploitation requires an active authenticated WordPress session and successful social engineering to load attacker-controlled content (UI:R), as reflected in the CVSS vector (PR:N, UI:R). No public exploit code or confirmed active exploitation has been identified at time of analysis, and the independent assessment rates this as a moderate-severity, low-priority issue for most defenders.
Missing access control checks in ThemeGrill's User Registration plugin for WordPress, versions through 5.2.8, let unauthenticated remote users (CVSS PR:N/UI:N) reach restricted functionality that should require higher privileges, resulting in low-impact disclosure of protected data (C:L, I:N, A:N). The issue is rated moderate at CVSS 5.3 and does not by itself enable account takeover, data modification, or code execution, so its practical value to an attacker is information gathering rather than full compromise. No public exploit code and no confirmed active exploitation (CISA KEV) have been identified at time of analysis, and the specific registration endpoint or feature that is improperly authorized is not named in the available data, so the exact exposure surface remains unscoped pending the vendor advisory.
Missing authorization in the ThemeGrill User Registration WordPress plugin, affecting all releases through 5.2.7, lets remote attackers (no authentication or user interaction required per the reported CVSS vector) invoke functionality that should be gated behind capability or role checks, with limited confidentiality, integrity, and availability impact. The reported CVSS 5.6 with AC:H reflects that successful exploitation likely depends on a specific plugin feature, role/permission configuration, or application state rather than working against every default install. No public exploit code and no confirmed active exploitation have been identified at time of analysis, and the available data does not name the precise vulnerable endpoint, so the modified/affected action must be confirmed from the Patchstack advisory.
Unauthenticated information disclosure affects the WordPress plugin User Registration (WPEverest) at versions 5.2.7 and earlier, where a missing authorization check lets remote visitors reach data that should require higher privileges. The assessed CVSS vector (5.3, AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms the issue is remotely reachable with no credentials and no user interaction, but impact is bounded to confidentiality - there is no evidence of data modification or full account takeover. At time of analysis there is no CISA KEV listing and no public exploit identified; the 'Authentication Bypass' tag should be read in the narrow sense of unauthorized data access rather than a complete authentication defeat.
Broken authentication in WPEverest's User Registration WordPress plugin (versions 5.2.6 and below) permits subscriber-level authenticated users to bypass authentication controls and perform unauthorized actions beyond their role permissions. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N) confirms network-exploitable with low-privilege access required, producing limited but real integrity and availability impact. No public exploit code or active CISA KEV listing has been identified at time of analysis.
Broken access control in the WPEverest User Registration WordPress plugin (versions ≤5.2.6) permits unauthenticated remote attackers to bypass authorization checks and perform unauthorized actions within the registration subsystem, yielding limited integrity impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms exploitation requires no authentication, no user interaction, and no special configuration, though impact is constrained to integrity modifications with no confidentiality or availability effect. No public exploit code and no active exploitation have been identified at time of analysis.
The User Registration & Membership - Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.3.2.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untrusted input from the 'profile-pic-url' parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows DOM-Based XSS.3.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated low-privilege users can exploit missing authorization checks in the ThemeGrill User Registration plugin (versions up to 5.2.8) to perform unauthorized actions, potentially altering site data or user information. This broken access control flaw (CWE-862) has a CVSS score of 7.1 and requires network access with low complexity, but no user interaction. No public exploit code or active exploitation has been identified at this time.
Unauthenticated availability-impacting broken access control affects the ThemeGrill User Registration WordPress plugin versions 5.1.2 and earlier, allowing remote attackers to invoke privileged actions without credentials. The CVSS 7.5 score (AV:N/AC:L/PR:N/UI:N) reflects pure availability impact (A:H) with no confidentiality or integrity loss, and no public exploit identified at time of analysis. The flaw is classified as CWE-862 Missing Authorization and tracked by Patchstack and ENISA EUVD-2026-36911.
Reflected cross-site scripting in the wpeverest User Registration plugin for WordPress (all versions up to and including 5.1.5) lets remote attackers inject arbitrary JavaScript that executes in a victim's browser when they follow a crafted link. The CVSS scope-change rating (7.1) reflects that injected script can act beyond the vulnerable component, but practical impact is bounded by the privileges of whichever user is lured into clicking. There is no public exploit identified at time of analysis, EPSS risk is negligible (0.03%, 10th percentile), and CISA SSVC records no known exploitation.
A privilege escalation vulnerability exists in the wpeverest User Registration WordPress plugin through version 4.4.9 due to incorrect privilege assignment (CWE-266). This flaw allows authenticated or unauthenticated attackers to escalate their privileges within the plugin, potentially gaining administrative access or elevated capabilities. No CVSS score, EPSS data, or KEV status has been published, limiting quantification of real-world exploitation risk, though the vulnerability was reported by Patchstack and affects all installations running version 4.4.9 or earlier.
Cross-site scripting (CWE-79) in the WPEverest 'User Registration' plugin for WordPress, affecting versions up to and including 5.3.0, allows an attacker holding a subscriber-level account to inject script that executes in a victim's browser session, scoring CVSS 6.5. Exploitation is constrained: the attacker must be an authenticated subscriber (PR:L, which presupposes that user registration is enabled on the target site), a victim must view the injected content (UI:R), and the resulting impact lands in the victim's browser context rather than the server (S:C). No public exploit code has been identified at time of analysis, and the flaw is not in CISA KEV; the vuln.today decision label is 'this_month', indicating scheduled rather than emergency remediation.
Missing authorization in ThemeGrill User Registration through 5.3.0 allows unauthenticated remote attackers to perform limited unauthorized modifications on affected WordPress sites, with no confidentiality or availability impact. The issue is a CWE-862 broken access control flaw scored CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/C:N/I:L/A:N), and the exact vulnerable feature or endpoint is not described in the available sources. No CISA KEV listing or public exploit code is identified in the supplied data, and the reported priority is this_month.
Basic cross-site scripting (XSS) in ThemeGrill User Registration through 5.3.0 allows remote attackers to inject script-related HTML/content into pages served by affected WordPress sites. Sites running the vulnerable plugin version are affected, and the independent assessment rates this medium severity (CVSS 5.3) with limited impact and no availability effect indicated. The supplied intelligence shows no confirmed active exploitation (CISA KEV) and no public exploit identified at time of analysis.
ThemeGrill's User Registration WordPress plugin (versions up to and including 5.2.8) fails to enforce authorization checks on one of its endpoints, letting a low-privilege authenticated user perform actions that should be restricted. Exploitation requires a valid session (CVSS PR:L), but because the plugin's core purpose is open self-service registration, an attacker can typically create the necessary account themselves - no user interaction is needed and the attack is remote and low-complexity. Impact is limited to integrity and availability of the affected functionality (I:L/A:L, no confidentiality impact), rated CVSS 5.4; no public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
WordPress sites running the ThemeGrill User Registration plugin through version 5.2.8 can be queried by unauthenticated remote attackers to retrieve embedded sensitive data, because a missing authorization check (CWE-862) leaves a data-exposing code path reachable without any privilege. Per the assessed CVSS vector (AV:N/AC:L/PR:N/UI:N), no authentication, user interaction, or non-default configuration is required, and the impact is confined to Low confidentiality with no integrity or availability effect - the attacker gains read access to specific exposed data rather than full account or site compromise. Exploitation is limited to sites that have not upgraded past 5.2.8, and there is no public exploit identified at time of analysis and no confirmation of active exploitation (not listed in CISA KEV); this is a routine patch-management item rather than an emergency.
Stored cross-site scripting in the ThemeGrill User Registration WordPress plugin (versions through 5.2.8) lets an authenticated low-privilege user - realistically anyone who can complete the plugin's own self-service sign-up form when open registration is enabled - persist malicious script into plugin-stored data that later renders in a victim's browser. The payload only fires when a higher-privileged user, typically an administrator reviewing registrations or user records, loads the affected page, so exploitation requires that human view-step and is not automatable against an idle target; CVSS is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and because the flaw is scope-changing it can affect resources beyond the plugin's own security context.
Cross-site request forgery (CSRF) in the ThemeGrill User Registration WordPress plugin through version 5.2.8 allows remote attackers to trick a logged-in privileged user into performing unintended actions, with low integrity and availability impact (CVSS 5.4). Exploitation requires an active authenticated WordPress session and successful social engineering to load attacker-controlled content (UI:R), as reflected in the CVSS vector (PR:N, UI:R). No public exploit code or confirmed active exploitation has been identified at time of analysis, and the independent assessment rates this as a moderate-severity, low-priority issue for most defenders.
Missing access control checks in ThemeGrill's User Registration plugin for WordPress, versions through 5.2.8, let unauthenticated remote users (CVSS PR:N/UI:N) reach restricted functionality that should require higher privileges, resulting in low-impact disclosure of protected data (C:L, I:N, A:N). The issue is rated moderate at CVSS 5.3 and does not by itself enable account takeover, data modification, or code execution, so its practical value to an attacker is information gathering rather than full compromise. No public exploit code and no confirmed active exploitation (CISA KEV) have been identified at time of analysis, and the specific registration endpoint or feature that is improperly authorized is not named in the available data, so the exact exposure surface remains unscoped pending the vendor advisory.
Missing authorization in the ThemeGrill User Registration WordPress plugin, affecting all releases through 5.2.7, lets remote attackers (no authentication or user interaction required per the reported CVSS vector) invoke functionality that should be gated behind capability or role checks, with limited confidentiality, integrity, and availability impact. The reported CVSS 5.6 with AC:H reflects that successful exploitation likely depends on a specific plugin feature, role/permission configuration, or application state rather than working against every default install. No public exploit code and no confirmed active exploitation have been identified at time of analysis, and the available data does not name the precise vulnerable endpoint, so the modified/affected action must be confirmed from the Patchstack advisory.
Unauthenticated information disclosure affects the WordPress plugin User Registration (WPEverest) at versions 5.2.7 and earlier, where a missing authorization check lets remote visitors reach data that should require higher privileges. The assessed CVSS vector (5.3, AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms the issue is remotely reachable with no credentials and no user interaction, but impact is bounded to confidentiality - there is no evidence of data modification or full account takeover. At time of analysis there is no CISA KEV listing and no public exploit identified; the 'Authentication Bypass' tag should be read in the narrow sense of unauthorized data access rather than a complete authentication defeat.
Broken authentication in WPEverest's User Registration WordPress plugin (versions 5.2.6 and below) permits subscriber-level authenticated users to bypass authentication controls and perform unauthorized actions beyond their role permissions. The CVSS:3.1 vector (AV:N/AC:L/PR:L/UI:N) confirms network-exploitable with low-privilege access required, producing limited but real integrity and availability impact. No public exploit code or active CISA KEV listing has been identified at time of analysis.
Broken access control in the WPEverest User Registration WordPress plugin (versions ≤5.2.6) permits unauthenticated remote attackers to bypass authorization checks and perform unauthorized actions within the registration subsystem, yielding limited integrity impact. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms exploitation requires no authentication, no user interaction, and no special configuration, though impact is constrained to integrity modifications with no confidentiality or availability effect. No public exploit code and no active exploitation have been identified at time of analysis.
The User Registration & Membership - Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.3.2.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untrusted input from the 'profile-pic-url' parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows DOM-Based XSS.3.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.