WPEverest

5 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-6145 Public exploit

  User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

  The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5. This is due to the is_admin_creation_process() method relying solely on the presence of action=createuser in the $_REQU…

  WPEverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder Web / CMS
  May 14, 2026
• Critical 9.8
  CVE-2026-4882 Public exploit

  User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

  The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to, and including, 1.6.20. This makes it possible for unauthen…

  WPEverest User Registration Advanced Fields Web / CMS
  May 2, 2026
• Critical 9.8
  CVE-2026-3300 Public exploit Scanner template EPSS 39%

  Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

  The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's process_filter() function concatenating user-submitted form field val…

  WPEverest Everest Forms Pro Web / CMS
  Mar 31, 2026
• High 8.1
  CVE-2026-32488 Public exploit

  WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

  Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through <= 4.4.9.

  WPEverest User Registration
  Mar 25, 2026
• Critical 9.8
  CVE-2026-1492 Public exploit Scanner template EPSS 29%

  User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

  The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to improper privilege management in all versions up to, and including, 5.1.2. Th…

  WPEverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder Web / CMS
  Mar 3, 2026