Skip to content
OpenAdvisories

Product · WPEverest

User Registration

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.1
    CVE-2026-42652

    WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Registration: from n/a through <= 5.1.5.

    WPEverest User Registration
  • High 8.1
    CVE-2026-32488 Public exploit

    WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through <= 4.4.9.

    WPEverest User Registration
  • High 8.2
    CVE-2025-67956

    WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through <= 4.4.6.

    WPEverest User Registration
  • High 7.1
    CVE-2025-39400

    WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Reflected XSS.This issue affects User Registration: from n/a through < 4.2.0.

    WPEverest User Registration
  • High 7.4
    CVE-2023-27459

    WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in WPEverest User Registration.This issue affects User Registration: from n/a through 2.3.2.1.

    WPEverest User Registration