Skip to content
OpenAdvisories

Product · N-Media

Simple User Registration

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-0844

    Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field

    The Simple User Registration plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 6.7 due to insufficient restriction on the 'profile_save_field' function. This makes it possible for authenticated attackers, with minima…

    N-Media Simple User Registration Web / CMS
  • High 7.2
    CVE-2025-12160

    Simple User Registration <= 6.6 - Unauthenticated Stored Cross-Site Scripting

    The Simple User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpr_admin_msg' parameter in all versions up to, and including, 6.6 due to insufficient input sanitization and output escaping. This makes it possible for u…

    N-Media Simple User Registration Web / CMS
  • High 8.8
    CVE-2025-53428

    WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in N-Media Simple User Registration wp-registration allows Privilege Escalation.This issue affects Simple User Registration: from n/a through <= 6.8.

    N-Media Simple User Registration