Product

User Registration & Membership Plugin (<= 5.2.8)

1 brief RSS

Arbitrary Shortcode Execution in User Registration & Membership Plugin

The User Registration & Membership plugin for WordPress is vulnerable to unauthenticated arbitrary shortcode execution due to insufficient sanitization of the HTTP_REFERER header.

User Registration & Membership plugin web-vulnerability wordpress arbitrary-code-execution

2t 1c 1h ago