User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

Güvenlik açıkları

• CVE-2023-3342abone+≤ 3.0.2

  User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload

  Kritik 9.9

• CVE-2026-1492kimlik doğrulamasız≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

  Kritik 9.8

• CVE-2024-2417abone+≤ 3.1.5

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Priv

  Yüksek 8.8

• CVE-2023-27459giriş gerekir≤ 2.3.2.1

  WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability

  Yüksek 8.8

• CVE-2023-3343abone+≤ 3.0.1

  User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection

  Yüksek 8.8

• CVE-2025-67956kimlik doğrulamasız≤ 4.4.6

  WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

  Yüksek 8.2

• CVE-2026-32488kimlik doğrulamasız≤ <= 4.4.9

  WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

  Yüksek 8.1

• CVE-2026-1779kimlik doğrulamasız≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Authentication Bypass

  Yüksek 8.1

• CVE-2026-25425kimlik doğrulamasız≤ 5.1.2

  WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2026-42652kimlik doğrulamasız · tıklama gerekir≤ 5.1.5

  WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2024-4958katılımcı+≤ 3.2.0.1

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation

  Yüksek 7.1

• CVE-2026-52701kimlik doğrulamasız≤ 5.2.2

  WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2026-1869kimlik doğrulamasız≤ 5.2.0

  User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass

  Orta 6.5

• CVE-2024-3295kimlik doğrulamasız≤ 3.1.5

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media Deletion

  Orta 6.5

• CVE-2026-1865abone+≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]

  Orta 6.5

• CVE-2025-13367katılımcı+≤ 4.4.6

  User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authentic

  Orta 6.4

• CVE-2025-6831katılımcı+≤ 4.2.4

  User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode

  Orta 6.4

• CVE-2026-6203kimlik doğrulamasız · tıklama gerekir≤ 5.1.4

  User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter

  Orta 6.1

• CVE-2025-39400kimlik doğrulamasız · tıklama gerekir≤ 4.2.0

  WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2025-1511kimlik doğrulamasız · tıklama gerekir≤ 4.0.4

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2024-1720kimlik doğrulamasız · tıklama gerekir≤ 3.1.4

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting

  Orta 6.1

• CVE-2025-14976kimlik doğrulamasız · tıklama gerekir≤ 4.4.8

  User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion

  Orta 5.4

• CVE-2026-73995giriş gerekir≤ 5.2.6

  WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

  Orta 5.4

• CVE-2026-4056katılımcı+≤ 5.1.4

  User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation

  Orta 5.4

• CVE-2026-74017kimlik doğrulamasız≤ 5.2.7

  WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-73403kimlik doğrulamasız≤ 5.2.6

  WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-6145kimlik doğrulamasız≤ 5.1.5

  User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

  Orta 5.3

• CVE-2026-2356kimlik doğrulamasız≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion

  Orta 5.3

• CVE-2025-3281kimlik doğrulamasız≤ 4.2.1

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited U

  Orta 5.3

• CVE-2025-3282kimlik doğrulamasız≤ 4.1.3

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membershi

  Orta 5.3

• CVE-2023-29429kimlik doğrulamasız≤ 2.3.2.1

  WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-7651abone+≤ 5.1.5

  User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Paramet

  Orta 5.3

• CVE-2025-9085yönetici≤ 4.3.0

  User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection

  Orta 4.9

• CVE-2025-30899yüksek yetki≤ 4.0.3

  WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability

  Orta 4.8

• CVE-2023-23987yönetici≤ 2.3.0

  WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2026-24353giriş gerekir≤ 4.4.9

  WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability

  Orta 4.3

• CVE-2025-3292abone+≤ 4.1.3

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber

  Orta 4.3

• CVE-2026-3601katılımcı+≤ 5.1.4

  User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content Modification

  Orta 4.3