Product by WPEverest

    User Registration

    19 known vulnerabilities in User Registration (WPEverest), 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in User Registration (WPEverest)
    CriticalCVE-2023-3342

    User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload

    also in 1 other product

    		9.9
    HighCVE-2023-3343

    User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection

    also in 1 other product

    		8.8
    HighCVE-2022-3912

    User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload

    		7.5
    HighCVE-2026-32488

    WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

    		8.1
    MediumCVE-2026-27061

    WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-67956

    WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

    		8.2
    HighCVE-2023-27459

    WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability

    also in 1 other product

    		7.4
    MediumCVE-2026-74017

    WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-73995

    WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

    		5.4
    MediumCVE-2026-73403

    WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

    		5.3
    HighCVE-2026-42652

    WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-39400

    WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2021-24654

    User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting

    		5.4
    MediumCVE-2023-5228

    User Registration < 3.0.4.2 - Admin+ Stored XSS

    		4.8
    MediumCVE-2023-29429

    WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-1511

    User Registration: Cross-site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2025-30899

    WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2023-23987

    WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

    		5.9
    MediumCVE-2026-24353

    WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability

    		4.3

    All products by WPEverest