Vendor

WPEverest

71 known vulnerabilities.

Products

User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 28 Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder 15 User Registration 13 Everest Forms Pro 4 Everest Forms 4 User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin 2 PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer 1 Everest Forms – Build Contact Forms, Surveys, Polls, Application Forms, and more with Ease! 1 Everest Forms - Frontend Listing 1 User Registration & Membership Pro 1 User Registration Advanced Fields 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2026-6145 Public exploit

User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5. This is due to the is_admin_creation_process() method relying solely on the presence of action=createuser in the $_REQU…

WPEverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder Web / CMS

May 14, 2026