CVE-2026-120840: WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ThemeGrill User Registration (user-registration)to a version that resolves this vulnerability.Fixed in 5.3.1
Event History
Frequently Asked Questions
Which versions are affected?
The issue affects ThemeGrill User Registration through version 5.3.0. The earliest affected version is not specified.
What access-control weakness is involved?
The vulnerability is described as missing authorization that permits exploitation of incorrectly configured access-control security levels. The provided information does not identify the affected endpoint, action, or required attacker privileges.