Product by WPEverest
User Registration \& Membership
8 known vulnerabilities in User Registration \& Membership (WPEverest), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-2563 | User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation | 8.1 | |
| High | CVE-2025-2594 | User Registration & Membership < 4.1.3 - Authentication Bypass | 8.1 | |
| High | CVE-2023-27459 | WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability | 7.4 | |
| High | CVE-2025-39400 | WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability | 7.1 | |
| Medium | CVE-2024-1720 | WPEverest User Registration \& Membership: Cross-site Scripting | 4.7 | |
| Medium | CVE-2025-30899 | WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability | 5.9 | |
| Medium | CVE-2025-3282 | WPEverest User Registration \& Membership: Authorization Bypass Through User-Controlled Key | 5.3 | |
| Medium | CVE-2025-3292 | WPEverest User Registration \& Membership: Authorization Bypass Through User-Controlled Key | 4.3 |