CVE-2026-109692: WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registration pluginto a version that resolves this vulnerability.Fixed in 5.3.0
Event History
Frequently Asked Questions
Which installations are affected?
ThemeGrill User Registration versions through 5.2.8 are affected. The available data does not specify a lower affected version bound.
What access does an attacker need?
Exploitation is network-accessible and requires a low-privileged authenticated account. No user interaction is required.
What is the likely security impact?
The issue is rated high severity with low confidentiality impact and high integrity impact. The provided vector indicates no availability impact and no scope change.