CVE-2026-105881: WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
Published Oct 13, 2026
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
1 affected component
themegrill User Registration<=5.2.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registration pluginto a version that resolves this vulnerability.Fixed in 5.3.0
Event History
Oct 13, 2026
CVE Published
via MITRE·08:45 AM
Data Sourced
via MITRE·08:45 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector indicates network-reachable exploitation with low privileges required. Exploitation also requires user interaction.
2
What is the expected security impact if exploitation succeeds?
The vulnerability is rated medium severity with low impacts to confidentiality, integrity, and availability. The scope is changed, indicating the impact may extend beyond the vulnerable component's original security authority.