Known vulnerabilities in User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Build membership sites with tiered plans, content restriction, drag-&-drop custom registration & login form builder, and built-in payment system.
51Reported vulnerabilities
9.9Highest CVSS score
5.2.7Latest version
50,000+Active installs
What to do now
Update User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder to 5.2.5 or later.
51 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2025-2563 | Critical | 46.4% | 4.1.1 and earlier | 4.1.2 |
March 24, 2025 |
| CVE-2026-1492 | Critical | 24.2% | 0 to 5.1.2 (inclusive) | 5.1.3 |
March 3, 2026 |
| CVE-2023-3342 | Critical | 1.7% | Before 3.0.2.1 | 3.0.2.1 |
July 13, 2023 |
| CVE-2025-2594 | High | 9.1% | 4.1.2 and earlier | 4.1.3 |
April 1, 2025 |
| CVE-2022-3912 | High | 0.7% | Before 2.2.4.1 | 2.2.4.1 |
December 12, 2022 |
| CVE-2026-32488 | Critical | 0.3% | 4.4.9 and earlier | 5.1.3 |
March 23, 2026 |
| CVE-2021-24654 | Medium | 0.6% | Before 2.0.2 | 2.0.2 |
October 4, 2021 |
| CVE-2024-2417 | High | 0.9% | 0 to 3.1.5 (inclusive) 0 to 3.1.5 (inclusive) |
3.2.0 |
May 2, 2024 |
| CVE-2023-3343 | High | 1.1% | 3.0.1 and earlier | 3.0.2 |
July 13, 2023 |
| CVE-2023-5228 | Medium | 0.6% | Before 3.0.4.2 | 3.0.4.2 |
November 6, 2023 |
| CVE-2026-11961 | High | 0.4% | 5.2.2 and earlier | 5.2.3 |
June 26, 2026 |
| CVE-2026-1779 | High | 0.4% | 0 to 5.1.2 (inclusive) | 5.1.3 |
February 26, 2026 |
| CVE-2023-27459 | High | 0.6% | 2.3.2.1 and earlier | 2.3.3 |
March 21, 2023 |
| CVE-2024-4958 | High | 0.3% | 0 to 3.2.0.1 (inclusive) | 3.2.1 |
June 1, 2024 |
| CVE-2024-3295 | Medium | 0.9% | 0 to 3.1.5 (inclusive) | 3.2.0 |
May 2, 2024 |
| CVE-2026-1869 | Medium | 0.3% | 0 to 5.2.0 (inclusive) | 5.2.1 |
June 26, 2026 |
| CVE-2026-1865 | Medium | 0.3% | 0 to 5.1.2 (inclusive) | 5.1.3 |
April 8, 2026 |
| CVE-2025-13367 | Medium | 0.3% | 0 to 4.4.6 (inclusive) | 4.4.7 |
December 15, 2025 |
| CVE-2025-6831 | Medium | 0.3% | 0 to 4.2.4 (inclusive) | 4.3.0 |
July 22, 2025 |
| CVE-2026-79996 | Medium | 0.3% | Before 5.2.6 | 5.2.6 |
August 28, 2026 |
| CVE-2026-6203 | Medium | 0.7% | 0 to 5.1.4 (inclusive) | 5.1.5 |
April 13, 2026 |
| CVE-2024-1720 | Medium | 0.5% | 0 to 3.1.4 (inclusive) | 3.1.5 |
March 7, 2024 |
| WF-761a4801-fc4a-40a0-b5aa-303d88a87062 | Medium | — | 1.5.5 and earlier | 1.5.6 |
January 9, 2019 |
| CVE-2026-42652 | Medium | 0.1% | 5.1.5 and earlier | 5.1.6 |
April 9, 2026 |
| CVE-2025-39400 | Medium | 0.3% | 4.1.5 and earlier | 4.2.0 |
April 22, 2025 |
| CVE-2025-1511 | Medium | 0.3% | Before 4.1.0 | 4.1.0 |
February 28, 2025 |
| CVE-2023-23987 | Medium | 0.4% | 2.3.0 and earlier | 2.3.1 |
January 20, 2023 |
| CVE-2026-73403 | Medium | 0.2% | 5.2.6 and earlier | 5.2.7 |
August 13, 2026 |
| CVE-2026-16736 | Medium | 0.3% | 5.2.5 and earlier | 5.2.6 |
July 27, 2026 |
| CVE-2026-11966 | Medium | 0.3% | 5.2.2 and earlier | 5.2.3 |
June 26, 2026 |
| CVE-2026-52701 | Medium | 0.3% | 5.2.2 and earlier | 5.2.3 |
June 22, 2026 |
| CVE-2026-11964 | Medium | 0.5% | 5.2.1 and earlier | 5.2.2 |
June 22, 2026 |
| CVE-2026-11965 | Medium | 0.3% | 5.1.0 and earlier | 5.2.0 |
June 11, 2026 |
| CVE-2026-7651 | Medium | 0.4% | 0 to 5.1.5 (inclusive) | 5.1.6 |
May 28, 2026 |
| CVE-2026-25425 | Medium | 0.4% | 5.1.2 and earlier | 5.1.3 |
May 28, 2026 |
| CVE-2026-6145 | Medium | 0.4% | 0 to 5.1.5 (inclusive) | 5.1.6 |
May 14, 2026 |
| CVE-2026-4056 | Medium | 0.2% | 0 to 5.1.4 (inclusive) | 5.1.5 |
March 24, 2026 |
| CVE-2026-2356 | Medium | 0.2% | 0 to 5.1.2 (inclusive) | 5.1.3 |
February 26, 2026 |
| CVE-2025-67956 | Medium | 0.3% | 4.4.6 and earlier | 4.4.7 |
January 21, 2026 |
| CVE-2025-14976 | Medium | 0.1% | 0 to 4.4.8 (inclusive) | 4.4.9 |
January 10, 2026 |
| CVE-2026-24353 | Medium | 0.2% | 4.4.9 and earlier | 5.0 |
January 8, 2026 |
| CVE-2025-3281 | Medium | 0.4% | 0 to 4.2.1 (inclusive) | 4.2.2 |
May 6, 2025 |
| CVE-2025-3282 | Medium | 0.3% | 0 to 4.1.3 (inclusive) | 4.1.4 |
April 12, 2025 |
| CVE-2023-29429 | Medium | 0.4% | 2.3.2.1 and earlier | 2.3.3 |
April 6, 2023 |
| CVE-2025-9085 | Medium | 0.3% | 0 to 4.3.0 (inclusive) | 4.4.0 |
September 6, 2025 |
| CVE-2025-30899 | Medium | 0.3% | 4.0.3 and earlier | 4.0.4 |
March 27, 2025 |
| CVE-2026-79995 | Medium | 0.2% | Before 5.2.5 | 5.2.5 |
August 28, 2026 |
| CVE-2026-73995 | Medium | 0.3% | 5.2.6 and earlier | 5.2.7 |
August 14, 2026 |
| CVE-2026-11963 | Medium | 0.4% | 5.2.1 and earlier | 5.2.2 |
June 22, 2026 |
| CVE-2026-3601 | Medium | 0.3% | 0 to 5.1.4 (inclusive) | 5.1.5 |
May 5, 2026 |
| CVE-2025-3292 | Medium | 0.3% | 0 to 4.1.3 (inclusive) | 4.1.4 |
April 12, 2025 |