Skip to content
OpenAdvisories

Product · WPEverest

User Registration

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-27061

    WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions.

    WPEverest User Registration
  • Medium 5.3
    CVE-2026-74017

    WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in User Registration <= 5.2.7 versions.

    WPEverest User Registration
  • Medium 5.4
    CVE-2026-73995

    WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

    Subscriber Broken Authentication in User Registration <= 5.2.6 versions.

    WPEverest User Registration
  • Medium 5.3
    CVE-2026-73403

    WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.

    WPEverest User Registration
  • Medium 4.3
    CVE-2026-24353

    WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through <= 4.4.9.

    WPEverest User Registration
  • Medium 5.9
    CVE-2025-30899

    WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through <= 4.0.3.

    WPEverest User Registration
  • Medium 5.3
    CVE-2023-29429

    WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 2.3.2.1.

    WPEverest User Registration
  • Medium 5.9
    CVE-2023-23987

    WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPEverest User Registration plugin <= 2.3.0 versions.

    WPEverest User Registration