Skip to content
OpenAdvisories
High · 8.2 CVE-2025-67956 EUVD-2026-4027GHSA-pcpx-26f9-4672

WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

Published Jan 22, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through <= 4.4.6.

Affected products

VendorProductAffectedFixed
wpeverest User Registration ≤ 4.4.6 —

References