All packages
User Registration vulnerabilities
3 known CVE vulnerabilities in User Registration, translated and rated.
- CVE-2026-73995Medium
The User Registration plugin version 5.2.6 and earlier has a broken authentication vulnerability exploitable by Subscriber users. This means a subscriber can gain unauthorized access to accounts or functions they should not have permissions for.
- CVE-2026-73403Medium
Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.
- CVE-2026-25425High
Versions up to 5.1.2 have a vulnerability in access control that allows user registration without authentication.