WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-registration
Published
2024-04-15
Title
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin < 3.2.0 - Missing Authorization to Unauthenticated Media Deletion
Slug
user-registration
Published
2024-04-19
Title
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin < 3.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
user-registration
Published
2024-05-31
Title
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin < 3.2.1 - Missing Authorization to Privilege Escalation
Slug
user-registration
Published
2025-02-27
Title
User Registration & Membership – Custom Registration Form, Login Form, and User Profile < 4.1.0 - Reflected Cross-Site Scripting
Slug
user-registration
Published
2025-03-24
Title
User Registration & Membership (Free < 4.1.2, Pro < 5.1.2) - Unauthenticated Privilege Escalation
Slug
user-registration
Published
2025-04-01
Title
User Registration & Membership (Free < 4.1.3, Pro < 5.1.3) - Authentication Bypass
Slug
user-registration
Published
2025-03-27
Title
User Registration < 4.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
user-registration
Published
2025-04-11
Title
User Registration & Membership – Custom Registration Form, Login Form, and User Profile < 4.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
Slug
user-registration
Published
2025-04-11
Title
User Registration & Membership – Custom Registration Form, Login Form, and User Profile < 4.1.4 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Slug
user-registration
Published
2025-04-22
Title
User Registration < 4.2.0 - Reflected Cross-Site Scripting
Slug
user-registration
Published
2025-05-05
Title
User Registration & Membership – Custom Registration Form, Login Form, and User Profile < 4.2.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
Slug
user-registration
Published
2025-07-21
Title
User Registration < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode
Slug
user-registration
Published
2025-09-05
Title
User Registration & Membership < 4.4.0 - Authenticated (Admin+) SQL Injection
Slug
user-registration
Published
2025-12-15
Title
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin < 4.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
user-registration
Published
2026-01-09
Title
User Registration & Membership < 4.4.9 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
user-registration
Published
2026-01-21
Title
User Registration < 4.4.7 - Missing Authorization
Slug
user-registration
Published
2026-01-08
Title
User Registration < 5.0 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
user-registration
Published
2026-02-25
Title
User Registration & Membership < 5.1.3 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
Slug
user-registration
Published
2026-02-25
Title
User Registration & Membership < 5.1.3 - Authentication Bypass
Slug
user-registration
Published
2026-03-02
Title
User Registration & Membership < 5.1.3 - Unauthenticated Privilege Escalation via Membership Registration
Slug
user-registration
Published
2026-03-23
Title
User Registration & Membership < 5.1.5 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation
Slug
user-registration
Published
2026-04-07
Title
User Registration & Membership < 5.1.3 - Subscriber+ SQLi via membership_ids[]
Slug
user-registration
Published
2026-04-13
Title
User Registration & Membership < 5.1.5 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
Slug
user-registration
Published
2026-05-04
Title
User Registration & Membership < 5.1.5 - Missing Authorization to Authenticated (Contributor+) Limited Page Content Modification
Slug
user-registration
Published
2026-03-23
Title
User Registration & Membership < 5.1.3 - Unauthenticated Remote Code Execution