Skip to content
OpenAdvisories

Product · WPEverest

User Registration Advanced Fields

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4882 Public exploit

    User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload

    The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAF_AJAX::method_upload' function in all versions up to, and including, 1.6.20. This makes it possible for unauthen…

    WPEverest User Registration Advanced Fields Web / CMS