UR
Product
User Registration
19
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 11Low 0
Watch
Add User Registration to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3342 | 9.9 | Jul 13 | User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload Affected: before 3.0.2.1 |
| CVE-2024-2417 | 8.8 | May 2 | User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Affected: through 3.1.5 |
| CVE-2023-27459 | 8.8 | Mar 26 | WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability Affected: through 2.3.2.1 |
| CVE-2023-3343 | 8.8 | Jul 13 | User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection Affected: through 3.0.1 |
| CVE-2025-67956 | 8.2 | Jan 22 | WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability Affected: through 4.4.6 |
| CVE-2026-32488 | 8.1 | Mar 25 | WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability Affected: through <= 4.4.9 |
| CVE-2022-3912 | 7.5 | Dec 12 | User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload Affected: before 2.2.4.1 |
| CVE-2026-42652 | 7.1 | Apr 29 | WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability Affected: through 5.1.5 |
| CVE-2025-39400 | 6.1 | Apr 24 | WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 4.2.0 |
| CVE-2025-1511 | 6.1 | Feb 28 | User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting Affected: before 4.1.0 |
| CVE-2026-73995 | 5.4 | Aug 18 | WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability Affected: through 5.2.6 |
| CVE-2021-24654 | 5.4 | Oct 4 | User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting Affected: before 2.0.2 |
| CVE-2026-74017 | 5.3 | Sep 17 | WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability Affected: through 5.2.7 |
| CVE-2026-73403 | 5.3 | Aug 13 | WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability Affected: through 5.2.6 |
| CVE-2023-29429 | 5.3 | Dec 9 | WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability Affected: through 2.3.2.1 |
| CVE-2025-30899 | 4.8 | Mar 27 | WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability Affected: through 4.0.3 |
| CVE-2023-5228 | 4.8 | Nov 6 | User Registration < 3.0.4.2 - Admin+ Stored XSS Affected: before 3.0.4.2 |
| CVE-2023-23987 | 4.8 | Apr 6 | WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS) Affected: through 2.3.0 |
| CVE-2026-24353 | 4.3 | Jan 22 | WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability Affected: through 4.4.9 |
Showing 19