Medium
CVE-2026-3601
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71
Reset filters
Critical
CVE-2026-4882
User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-40726
User Registration Stripe <= 1.3.14 - Missing Authorization
Medium
CVE-2026-6203
User Registration & Membership <= 5.1.4 - Unauthenticated Open Redirect via 'redirect_to_on_logout' Parameter
Medium
CVE-2026-42652
User Registration <= 5.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-1865
User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]
Medium
CVE-2026-4056
User Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation
Critical
CVE-2026-32488
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 4.4.9 - Unauthenticated Remote Code Execution
Critical
CVE-2026-1492
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
Medium
CVE-2026-2356
User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
High
CVE-2026-1779
User Registration & Membership <= 5.1.2 - Authentication Bypass
Medium
CVE-2025-67956
User Registration <= 4.4.6 - Missing Authorization
Medium
CVE-2025-12825
User Registration Using Contact Form 7 <= 2.5 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-14976
User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2026-24353
User Registration <= 4.4.9 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-13367
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2025-9892
Restrict User Registration <= 1.0.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-9085
User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-6831
User Registration <= 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via urcr_restrict Shortcode
Critical
CVE-2025-60207
Custom User Registration Fields for WooCommerce <= 2.1.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-53239
User Registration Aide <= 1.5.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-3281
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
Medium
CVE-2025-46459
Confirm User Registration <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-39400
User Registration <= 4.1.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.