CVE-2026-109699: WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
Published Oct 13, 2026
·Updated
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.
Affected Software
1 affected component
themegrill User Registration<=5.2.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registration pluginto a version that resolves this vulnerability.Fixed in 5.3.0
Event History
Oct 13, 2026
CVE Published
via MITRE·08:53 AM
Data Sourced
via MITRE·08:53 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.
2
What is the potential impact?
The issue can affect integrity and availability at a low level. The provided data does not indicate a confidentiality impact.
3
Which releases are affected?
ThemeGrill User Registration versions through 5.2.8 are affected. The earliest affected version is not specified.