UR
Product
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
28
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 2High 6Medium 20Low 0
Watch
Add User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2417 | 8.8 | May 2 | User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation Affected: through 3.1.5 |
| CVE-2023-3343 | 8.8 | Jul 13 | User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection Affected: through 3.0.1 |
| CVE-2026-92798 | 8.1 | Oct 17 | User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag Affected: through 5.2.8 |
| CVE-2026-1779 | 8.1 | Feb 26 | User Registration & Membership <= 5.1.2 - Authentication Bypass Affected: through 5.1.2 |
| CVE-2026-96660 | 7.2 | Oct 17 | User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value Affected: through 5.2.8 |
| CVE-2024-4958 | 7.1 | Jun 1 | User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation Affected: through 3.2.0.1 |
Showing 6