WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-registration
Published
2026-10-13
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.0 - Cross-Site Request Forgery
Slug
user-registration
Published
2026-10-13
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
user-registration
Published
2026-10-13
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.0 - Missing Authorization
Slug
user-registration
Published
2026-10-15
Title
User Registration & Membership < 5.3.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name
Slug
user-registration
Published
2026-10-16
Title
User Registration & Membership < 5.3.0 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value
Slug
user-registration
Published
2026-10-16
Title
User Registration & Membership < 5.3.0 - Cross-Site Request Forgery to trigger_bulk_action()
Slug
user-registration
Published
2026-10-29
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.1 - Missing Authorization
Slug
user-registration
Published
2026-10-16
Title
User Registration & Membership < 5.3.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag
Slug
user-registration
Published
2026-10-13
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
user-registration
Published
2026-10-30
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
user-registration
Published
2026-10-29
Title
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.3.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
user-registration-advanced-fields
Published
2026-05-01
Title
User Registration Advanced Fields < 1.6.21 - Unauthenticated Arbitrary File Upload
Slug
user-registration-aide
Published
2025-06-08
Title
User Registration Aide <= 1.5.3.8 - Reflected Cross-Site Scripting
Slug
user-registration-plugin-for-woocommerce
Published
2025-07-14
Title
Custom User Registration Fields for WooCommerce <= 2.1.2 - Unauthenticated Arbitrary File Upload
Slug
user-registration-plugin-for-woocommerce
Published
2026-08-29
Title
Custom User Registration Fields for WooCommerce < 2.2.4 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout
Slug
user-registration-pro
Published
2025-03-24
Title
User Registration & Membership (Free < 4.1.2, Pro < 5.1.2) - Unauthenticated Privilege Escalation
Slug
user-registration-pro
Published
2025-04-01
Title
User Registration & Membership (Free < 4.1.3, Pro < 5.1.3) - Authentication Bypass
Slug
user-registration-pro
Published
2025-04-18
Title
User Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile < 5.2.0 - Cross-Site Request Forgery to User Deletion
Slug
user-registration-pro
Published
2026-08-19
Title
User Registration PRO < 5.4.6 - Unauthenticated Privilege Escalation via Account Takeover
Slug
user-registration-pro
Published
2026-10-15
Title
User Registration PRO < 6.3.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header
Slug
user-registration-stripe
Published
2026-04-16
Title
User Registration Stripe < 1.3.15 - Missing Authorization
Slug
user-registration-stripe
Published
2026-06-05
Title
User Registration Stripe < 1.3.13 - Missing Authorization
Slug
user-registration-using-contact-form-7
Published
2025-04-09
Title
User Registration Using Contact Form 7 < 2.5 - Cross-Site Request Forgery
Slug
user-registration-using-contact-form-7
Published
2026-01-16
Title
User Registration Using Contact Form 7 < 2.6 - Authenticated (Subscriber+) Information Exposure
Slug
user-rights-access-manager
Published
2021-04-15
Title
User Rights Access Manager < 1.0.4 - Improper Access Controls