WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.

Üreticinin çözüm notu (İngilizce)

Update the WordPress User Registration plugin to the latest available version (at least 5.3.1).

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…ugin-5-3-0-broken-access-control-vulnerability Diğer

Kayıt geçmişi

1. 29 Eki 2026 17:29Yayımlandı

İlgili açıklar

• 5,3 CVE-2026-25467WordPress User Registration plugin <= 5.3.0 - Content Injection vulnerability
• 6,3 CVE-2026-82705Apache Wicket: The configured authorization strategy is not applied to an IResource embedded in a component
• 6,9 CVE-2026-82704Apache Wicket: A listener is invoked on a page instance the request itself created and never configured
• 2,3 CVE-2026-82558Apache Wicket: WebSocketBehavior delivers client messages to a component the client may not invoke
• 6,9 CVE-2026-82557Apache Wicket: A disabled or invisible form submitting component is still invoked on a plain form submission
• 6,3 CVE-2026-82115Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResource