CVE-2026-105882: WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registrationto a version that resolves this vulnerability.Fixed in 5.3.0
Event History
Frequently Asked Questions
What level of access does an attacker need?
An attacker needs low-level privileges and network access. Exploitation is rated low complexity, but it requires user interaction.
Which installations should be considered affected?
ThemeGrill User Registration versions through 5.2.8 are affected. The available data does not identify a fixed version.
What is the expected impact if exploitation succeeds?
The vulnerability can affect confidentiality, integrity, and availability at a low level. Its scope is changed, meaning the impact may extend beyond the vulnerable component's security authority.