User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder vulnerabilities

Product

User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder

by wpeverest · last CVE Oct 17, 2026

CVEs

On KEV

9.9

Max CVSS

New 30D

Vulnerabilities28 In the news0 Timeline

Severity mix

Critical 2High 6Medium 20Low 0

Severity

All severities28 Critical2 High6 Medium20 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-3342	9.9	2%	Jul 13	User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload Affected: through 3.0.2
CVE-2026-1492	9.8	29%	Mar 3	User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration Affected: through 5.1.2