CVE-2026-106597: WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registration pluginto a version that resolves this vulnerability.Fixed in 5.3.0
Event History
Frequently Asked Questions
Which installations are affected?
ThemeGrill User Registration installations running versions through 5.2.8 are affected. The available data does not identify a fixed version.
Does exploitation require an authenticated account or user interaction?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected security impact?
The supplied CVSS vector indicates low confidentiality impact, with no integrity or availability impact reported.
How can I determine whether my site is affected?
Check whether the ThemeGrill User Registration plugin is installed and identify its version. Installations at version 5.2.8 or earlier fall within the stated affected range.