VendorsWPEverestuser_registration_%5C%26_membershipall versions
Vulnerabilities

WPEverest User Registration & Membership

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

8CVEs
CVE-2023-27459
WordPress User Registration plugin <= 2.3.2.1 - Authenticated PHP Object Injection vulnerability
Published 2024-03-26 · Modified
8.8EPSS 0.006
CVE-2025-2563
User Registration & Membership < 4.1.2- Unauthenticated Privilege Escalation
Published 2025-04-14 · Analyzed
8.1EPSS 0.491
CVE-2025-2594
User Registration & Membership < 4.1.3 - Authentication Bypass
Published 2025-04-22 · Analyzed
8.11 PoCEPSS 0.095
CVE-2025-39400
WordPress User Registration plugin < 4.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2025-04-24 · Modified
7.1EPSS 0.003
CVE-2024-1720
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting
Published 2024-03-07 · Modified
6.1EPSS 0.005
CVE-2025-30899
WordPress User Registration plugin <= 4.0.3 - Cross Site Scripting (XSS) vulnerability
Published 2025-03-27 · Modified
5.9EPSS 0.003
CVE-2025-3282
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Published 2025-04-12 · Analyzed
5.3EPSS 0.003
CVE-2025-3292
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
Published 2025-04-12 · Analyzed
4.3EPSS 0.003