WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

User Registration – Custom Registration Form, Login Form And User Profile For WordPress

2023-07-14
User Registration < 3.0.2.1 - Subscriber+ Arbitrary File Upload Leading to RCE
Fixed in version 3.0.2.1
2023-07-12
User Registration < 3.0.2.1 - Subscriber+ Arbitrary File Upload
Fixed in version 3.0.2.1
2023-06-29
User Registration < 3.0.2 - Subscriber+ PHP Object Injection
Fixed in version 3.0.2
2023-03-21
User Registration < 2.3.3 - Subscriber+ PHP Object Injection
Fixed in version 2.3.3
2023-01-20
User Registration < 2.3.1 - Admin+ Stored XSS
Fixed in version 2.3.1
2022-11-21
User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload
Fixed in version 2.2.4.1
2021-09-06
User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
Fixed in version 2.0.2
2019-01-09
User Registration <= 1.5.5 - Authenticated Cross-Site Scripting (XSS)
Fixed in version 1.5.6