WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-registration
Published
2025-07-21
Title
User Registration < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode
Slug
user-registration
Published
2025-09-05
Title
User Registration & Membership < 4.4.0 - Authenticated (Admin+) SQL Injection
Slug
user-registration
Published
2025-12-15
Title
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin < 4.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
user-registration-aide
Published
2025-06-08
Title
User Registration Aide <= 1.5.3.8 - Reflected Cross-Site Scripting
Slug
user-registration-plugin-for-woocommerce
Published
2025-07-14
Title
Custom User Registration Fields for WooCommerce <= 2.1.2 - Unauthenticated Arbitrary File Upload
Slug
user-registration-pro
Published
2025-03-24
Title
User Registration & Membership (Free < 4.1.2, Pro < 5.1.2) - Unauthenticated Privilege Escalation
Slug
user-registration-pro
Published
2025-04-01
Title
User Registration & Membership (Free < 4.1.3, Pro < 5.1.3) - Authentication Bypass
Slug
user-registration-pro
Published
2025-04-18
Title
User Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile < 5.2.0 - Cross-Site Request Forgery to User Deletion
Slug
user-registration-using-contact-form-7
Published
2025-04-09
Title
User Registration Using Contact Form 7 < 2.5 - Cross-Site Request Forgery
Slug
user-rights-access-manager
Published
2021-04-15
Title
User Rights Access Manager < 1.0.4 - Improper Access Controls
Slug
user-rights-access-manager
Published
2021-08-05
Title
User Rights Access Manager < 1.0.8 - Access Restriction Bypass
Slug
user-rights-access-manager
Published
2024-03-29
Title
User Rights Access Manager <= 1.1.2 - Reflected Cross-Site Scripting
Slug
user-rights-access-manager
Published
2024-06-20
Title
User Rights Access Manager <= 1.1.2 - Missing Authorization
Slug
user-role
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
user-role
Published
2023-03-13
Title
User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF
Slug
user-role-editor
Published
2014-08-01
Title
User Role Editor - Cross-Site Request Forgery
Slug
user-role-editor
Published
2016-04-05
Title
User Role Editor <= 4.24 - Privilege Escalation
Slug
user-role-editor
Published
2024-12-16
Title
User Role Editor < 4.64.4 - Cross-Site Request Forgery to Privilege Escalation
Slug
user-roles
Published
2025-02-02
Title
User Role <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
user-roles-and-capabilities
Published
2025-06-19
Title
User Roles and Capabilities <= 1.2.6 - Missing Authorization
Slug
user-session-synchronizer
Published
2025-04-09
Title
User Session Synchronizer <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
user-shortcodes-plus
Published
2024-02-26
Title
User Shortcodes Plus <= 2.0.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via user_meta Shortcode
Slug
user-spam-remover
Published
2024-04-05
Title
User Spam Remover < 1.1 - Unauthenticated Sensitive Information Exposure
Slug
user-spam-remover
Published
2025-12-04
Title
User Spam Remover <= 1.1 - Unauthenticated Information Exposure
Slug
user-specific-content
Published
2025-12-31
Title
User Specific Content <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting