User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin vulnerabilities

Product

User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin

by WPEverest · last CVE Oct 16, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 0High 1Medium 1Low 0

Severity

All severities2 Critical0 High1 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-87111	7.2	0%	Oct 16	User Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer Header Affected: through 6.2.9
CVE-2025-3284	4.3	0%	Apr 19	User Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile <= 5.1.3 - Cross-Site Request Forgery to User Deletion Affected: through 5.1.3