User Registration Pro Custom Registration Form Login Form And User Profile Wordpress Plugin
Monthly
Stored cross-site scripting in the premium build of the User Registration PRO WordPress plugin (all versions up to and including 6.2.9) lets unauthenticated attackers inject arbitrary JavaScript through the HTTP Referer header into a vulnerable AJAX endpoint, with the payload persisting so it executes whenever a victim loads the injected page. The nonce that normally protects that endpoint is localized into the page source of every front-end page for anonymous visitors, so no account or credentials are required, although the attacker must target a site running the paid premium build - the free WordPress.org distribution is not affected - and the payload only fires once a user actually visits the compromised page. No public exploit code and no confirmed active exploitation were identified at time of analysis; the assessed severity of 7.2 reflects the scope change and the limited, though real, confidentiality and integrity impact of script execution in a victim's browser.
Stored cross-site scripting in the premium build of the User Registration PRO WordPress plugin (all versions up to and including 6.2.9) lets unauthenticated attackers inject arbitrary JavaScript through the HTTP Referer header into a vulnerable AJAX endpoint, with the payload persisting so it executes whenever a victim loads the injected page. The nonce that normally protects that endpoint is localized into the page source of every front-end page for anonymous visitors, so no account or credentials are required, although the attacker must target a site running the paid premium build - the free WordPress.org distribution is not affected - and the payload only fires once a user actually visits the compromised page. No public exploit code and no confirmed active exploitation were identified at time of analysis; the assessed severity of 7.2 reflects the scope change and the limited, though real, confidentiality and integrity impact of script execution in a victim's browser.