VendorsWPEverestuser_registrationall versions
Vulnerabilities

WPEverest User Registration

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
Published 2023-07-13 · Modified
9.9EPSS 0.017
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
Published 2023-07-13 · Modified
8.8EPSS 0.011
CVE-2022-3912
User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload
Published 2022-12-12 · Modified
7.5EPSS 0.008
CVE-2025-1511
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting
Published 2025-02-28 · Analyzed
6.1EPSS 0.003
CVE-2023-23987
WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
Published 2023-04-06 · Modified
5.9EPSS 0.004
CVE-2021-24654
User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
Published 2021-10-04 · Modified
5.4EPSS 0.006
CVE-2023-29429
WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability
Published 2024-12-09 · Modified
5.3EPSS 0.004
CVE-2023-5228
User Registration < 3.0.4.2 - Admin+ Stored XSS
Published 2023-11-06 · Modified
4.8EPSS 0.006