CVE Tools

User Registration

28 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for User Registration, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

User Registration CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
User Registration CVEs per month
MonthCVEs
2024-110
2024-121
2025-010
2025-021
2025-031
2025-041
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-012
2026-020
2026-031
2026-041
2026-050
2026-062
2026-070
2026-082
2026-091
2026-108

Severity

How the 28 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical14%
  • High932%
  • Medium1864%

Latest CVEs

The 15 most recently published vulnerabilities affecting User Registration.

  1. CVE-2026-105882WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability6.5
  2. CVE-2026-109692WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability7.1
  3. CVE-2026-109699WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability5.4
  4. CVE-2026-106598WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability5.3
  5. CVE-2026-105881WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability6.5
  6. CVE-2026-103076WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability5.4
  7. CVE-2026-106597WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability5.3
  8. CVE-2026-96334WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability5.6
  9. CVE-2026-74017WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability5.3
  10. CVE-2026-73995WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability5.4
  11. CVE-2026-73403WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability5.3
  12. CVE-2026-52701WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability6.5
  13. CVE-2026-25425WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability7.5
  14. CVE-2026-42652WordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerability7.1
  15. CVE-2026-32488WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability8.1

Product grouping is registry-driven, with AI assist and human review. How it works