User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

Уязвимости

• CVE-2023-3342подписчик+≤ 3.0.2

  User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload

  Критич. 9.9

• CVE-2026-1492без авторизации≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

  Критич. 9.8

• CVE-2024-2417подписчик+≤ 3.1.5

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Priv

  Высокий 8.8

• CVE-2023-27459нужен вход≤ 2.3.2.1

  WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability

  Высокий 8.8

• CVE-2023-3343подписчик+≤ 3.0.1

  User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection

  Высокий 8.8

• CVE-2025-67956без авторизации≤ 4.4.6

  WordPress User Registration plugin <= 4.4.6 - Broken Access Control vulnerability

  Высокий 8.2

• CVE-2026-32488без авторизации≤ <= 4.4.9

  WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

  Высокий 8.1

• CVE-2026-1779без авторизации≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Authentication Bypass

  Высокий 8.1

• CVE-2026-25425без авторизации≤ 5.1.2

  WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2026-42652без авторизации · нужен клик≤ 5.1.5

  WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2024-4958участник+≤ 3.2.0.1

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation

  Высокий 7.1

• CVE-2026-52701без авторизации≤ 5.2.2

  WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-1869без авторизации≤ 5.2.0

  User Registration & Membership <= 5.2.0 - Missing Authorization to Unauthenticated Payment Bypass

  Средний 6.5

• CVE-2024-3295без авторизации≤ 3.1.5

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media Deletion

  Средний 6.5

• CVE-2026-1865подписчик+≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]

  Средний 6.5

• CVE-2025-13367участник+≤ 4.4.6

  User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authentic

  Средний 6.4

• CVE-2025-6831участник+≤ 4.2.4

  User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode

  Средний 6.4

• CVE-2026-6203без авторизации · нужен клик≤ 5.1.4

  User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter

  Средний 6.1

• CVE-2025-39400без авторизации · нужен клик≤ 4.2.0

  WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2025-1511без авторизации · нужен клик≤ 4.0.4

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting

  Средний 6.1

• CVE-2024-1720без авторизации · нужен клик≤ 3.1.4

  User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting

  Средний 6.1

• CVE-2025-14976без авторизации · нужен клик≤ 4.4.8

  User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion

  Средний 5.4

• CVE-2026-73995нужен вход≤ 5.2.6

  WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

  Средний 5.4

• CVE-2026-4056участник+≤ 5.1.4

  User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation

  Средний 5.4

• CVE-2026-74017без авторизации≤ 5.2.7

  WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-73403без авторизации≤ 5.2.6

  WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-6145без авторизации≤ 5.1.5

  User Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter

  Средний 5.3

• CVE-2026-2356без авторизации≤ 5.1.2

  User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion

  Средний 5.3

• CVE-2025-3281без авторизации≤ 4.2.1

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited U

  Средний 5.3

• CVE-2025-3282без авторизации≤ 4.1.3

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membershi

  Средний 5.3

• CVE-2023-29429без авторизации≤ 2.3.2.1

  WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-7651подписчик+≤ 5.1.5

  User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Paramet

  Средний 5.3

• CVE-2025-9085админ≤ 4.3.0

  User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection

  Средний 4.9

• CVE-2025-30899высокие права≤ 4.0.3

  WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2023-23987админ≤ 2.3.0

  WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2026-24353нужен вход≤ 4.4.9

  WordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerability

  Средний 4.3

• CVE-2025-3292подписчик+≤ 4.1.3

  User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber

  Средний 4.3

• CVE-2026-3601участник+≤ 5.1.4

  User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Limited Page Content Modification

  Средний 4.3