CVE-2026-106598: WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registration pluginto a version that resolves this vulnerability.Fixed in 5.3.0
Event History
Frequently Asked Questions
Does exploitation require an authenticated WordPress account or user interaction?
No. The vector is network-accessible, requires no privileges, has low attack complexity, and does not require user interaction.
What is the expected security impact if exploited?
The issue can expose embedded sensitive data, with a low confidentiality impact. No integrity or availability impact is identified.
Which plugin versions are within the reported affected range?
The reported affected range is User Registration versions through 5.2.8. The lower bound is listed as n/a, so the available data does not identify the first affected version.