Medium
CVE-2025-3284
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71
Reset filters
Medium
CVE-2025-3292
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
Medium
CVE-2025-3282
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Medium
CVE-2025-32655
Restrict User Registration <= 1.0.1 Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32679
User Registration Using Contact Form 7 <= 2.4 - Cross-Site Request Forgery
High
CVE-2025-2594
User Registration & Membership <= 4.1.2 - Authentication Bypass
Medium
CVE-2025-30899
User Registration <= 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-2563
User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-1511
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.0.4 - Reflected Cross-Site Scripting
High
CVE-2023-52209
WPForms User Registration <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation
High
CVE-2024-4958
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.2.0.1 - Missing Authorization to Privilege Escalation
High
CVE-2024-2417
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-3295
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.5 - Missing Authorization to Unauthenticated Media Deletion
Medium
CVE-2024-1720
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin <= 3.1.4 - Unauthenticated Stored Self-Based Cross-Site Scripting
Medium
CVE-2023-5228
User Registration – Custom Registration Form, Login Form And User Profile For WordPress <= 3.0.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-41954
ProfilePress <= 4.13.1 - Limited Privilege Escalation via 'acceptable_defined_roles'
Critical
CVE-2023-3342
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-3343
User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2023-29429
User Registration <= 2.3.2.1 - Missing Authorization via send_test_email
High
CVE-2023-27459
User Registration <= 2.3.2.1 - PHP Object Injection
Medium
CVE-2023-23987
User Registration <= 2.3.0 - Authenticated (Administrator+) Stored Cross Site Scripting
High
CVE-2022-3912
User Registration <= 2.2.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
761a4801-fc4a-40a0-b5aa-303d88a87062
User Registration <= 1.5.5 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.