High · 8.0 CVE-2023-52209 EUVD-2023-56882GHSA-jmjq-h283-6462

WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability

Published Aug 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPForms Product: WPForms User Registration

Description

Improper Privilege Management vulnerability in WPForms, LLC. WPForms User Registration allows Privilege Escalation.This issue affects WPForms User Registration: from n/a through 2.1.0.

Affected products

Vendor	Product	Affected	Fixed
WPForms, LLC.	WPForms User Registration	≤ 2.1.0	—

References

https://patchstack.com/database/vulnerability/wpforms-user-registration/wordpress-wpforms-user-registration-plugin-2-1-0-authenticated-privilege-escalation-vulnerability?_s_id=cve vdb-entry