Wpeverest User_registration
8 CVEs affecting Wpeverest User_registration. Latest disclosed: 2025-02-28. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-3342 | Critical | 9.9 | 2023-07-13 | The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'u… |
CVE-2023-3343 | High | 8.8 | 2023-07-13 | The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1 via deserialization of untrusted input… |
CVE-2022-3912 | High | 7.5 | 2022-12-12 | The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated… |
CVE-2025-1511 | Medium | 6.1 | 2025-02-28 | The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin… |
CVE-2023-23987 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPEverest User Registration plugin <= 2.3.0 versions. |
CVE-2021-24654 | Medium | 5.4 | 2021-10-04 | The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user… |
CVE-2023-29429 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects U… |
CVE-2023-5228 | Medium | 4.8 | 2023-11-06 | The User Registration WordPress plugin before 3.0.4.2 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin t… |