CVE-2026-96334: WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress User Registration pluginto a version that resolves this vulnerability.Fixed in 5.2.8
Event History
Frequently Asked Questions
Which deployments are affected?
ThemeGrill User Registration versions through 5.2.7 are affected. The available data does not identify a fixed version or indicate whether any particular configuration is required.
Does exploitation require authentication or user interaction?
The vector indicates network-based exploitation with no privileges required and no user interaction required. Exploitation complexity is rated high.
What impact could successful exploitation have?
The severity vector rates confidentiality, integrity, and availability impact as low. The issue is classified as broken access control caused by missing authorization and incorrectly configured access-control security levels.