CVE-2026-103076: WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability
Published Oct 13, 2026
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Request Forgery.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
1 affected component
themegrill User Registration<=5.2.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.3.0
Event History
Oct 13, 2026
CVE Published
via MITRE·08:43 AM
Data Sourced
via MITRE·08:43 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker can act remotely over the network and does not need prior privileges. Exploitation requires a user to interact with an attacker-controlled request.
2
What is the expected security impact of a successful attack?
The vulnerability is rated as having low integrity and availability impact, with no confidentiality impact indicated. The supplied CVSS score is 5.4 (medium).