user registration \& membership vulnerabilities and fixes

Recent CVEs affecting user registration \& membership, with upgrade or downgrade steps. 6 tracked.

Also searched as: userregistration\&membership.

user registration \& membership has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2025-04-24. Highest priority: CVE-2025-2563 (score 63/100).

CVE-2025-3292 MEDIUM 4.3 UPGRADE The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPre
CVE-2025-3282 MEDIUM 5.3 UPGRADE The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPre
CVE-2025-39400 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeveres
CVE-2025-30899 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeveres
CVE-2025-2594 HIGH 8.1 UPGRADE The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX ac
CVE-2025-2563 HIGH 8.1 UPGRADE The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account

FAQ

How do I fix user registration \& membership vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is user registration \& membership being exploited right now?

None of the tracked user registration \& membership CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which user registration \& membership CVE should I patch first?

CVE-2025-2563 currently ranks highest (63/100): The User Registration & Membership WordPress plugin before 4.1.2 does not prevent users to set their account .

RSS feed for user registration \& membership · ← Back to latest CVEs