CVE-2026-25450: WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Q: Which installations are affected?

The affected product is ThemeGrill User Registration, with versions through 5.3.0 identified as affected. The available information does not specify a lower fixed or first-affected version.

Q: What kind of weakness is involved?

This is a missing-authorization issue caused by incorrectly configured access-control security levels. The provided information does not identify the affected feature, required attacker access, or the specific actions an attacker could perform.

Q: Is a patched version identified?

No patched version is provided in the available data. Organizations should verify remediation guidance with the vendor or referenced advisory before selecting an update target.

Published Oct 29, 2026

Updated

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress User Registration plugin to a version that resolves this vulnerability.
Fixed in 5.3.1

Event History

Oct 29, 2026

CVE Published

via MITRE·02:29 PM

Data Sourced

via MITRE·02:29 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The affected product is ThemeGrill User Registration, with versions through 5.3.0 identified as affected. The available information does not specify a lower fixed or first-affected version.

What kind of weakness is involved?

This is a missing-authorization issue caused by incorrectly configured access-control security levels. The provided information does not identify the affected feature, required attacker access, or the specific actions an attacker could perform.

Is a patched version identified?

No patched version is provided in the available data. Organizations should verify remediation guidance with the vendor or referenced advisory before selecting an update target.

CVE-2026-25450: WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What kind of weakness is involved?

Is a patched version identified?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What kind of weakness is involved?

Is a patched version identified?