Advisories · Technology

wpeverest User Registration.

Every CVE that names wpeverest User Registration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-27061 CVE record

CVSS 6.5 Medium

WordPress User Registration plugin <= 5.3.0 - Cross Site Scripting (XSS) vulnerability
- wpeverest User Registration
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-74017 CVE record

CVSS 5.3 Medium

WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
- wpeverest User Registration
- Broken access control
Not analysed yet 17 Sept 2026
CVE-2026-73995 CVE record

CVSS 5.4 Medium

WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
- wpeverest User Registration
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-73403 CVE record

CVSS 5.3 Medium

WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability
- wpeverest User Registration
- Broken access control
Not analysed yet 13 Aug 2026
CVE-2026-42652 CVE record

CVSS 7.1 High

WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability
- wpeverest User Registration
- Cross-site scripting (XSS)
Not analysed yet 29 Apr 2026
CVE-2026-32488 CVE record

CVSS 8.1 High

WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability
- wpeverest User Registration
- Privilege escalation
Not analysed yet 25 Mar 2026
CVE-2026-24353 CVE record

CVSS 4.3 Medium

WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability
- wpeverest User Registration
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2025-67956 CVE record

CVSS 8.2 High

WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability
- wpeverest User Registration
- Broken access control
Not analysed yet 22 Jan 2026
CVE-2025-39400 CVE record

CVSS 7.1 High

WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
- wpeverest User Registration
- Cross-site scripting (XSS)
Not analysed yet 24 Apr 2025
CVE-2025-30899 CVE record

CVSS 5.9 Medium

WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability
- wpeverest User Registration
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2025
CVE-2023-29429 CVE record

CVSS 5.3 Medium

WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability
- WPEverest User Registration
- Broken access control
Not analysed yet 9 Dec 2024
CVE-2023-27459 CVE record

CVSS 7.4 High

WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
- WPEverest User Registration
- Insecure deserialization
Not analysed yet 26 Mar 2024
CVE-2023-23987 CVE record

CVSS 5.9 Medium

WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
- WPEverest User Registration
- Cross-site scripting (XSS)
Not analysed yet 6 Apr 2023