CVE-2026-73995— WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| wpeverest | User Registration | n/a≤ 5.2.6 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-73995
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Subscriber Broken Authentication in User Registration <= 5.2.6 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| wpeverest | User Registration | n/a ~ 5.2.6 | - |
II. Public POCs for CVE-2026-73995
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-73995
请登录查看更多情报信息。
News Coverage for CVE-2026-73995 (1)
IV. Related Vulnerabilities
Same product: User Registration
- CVE-2026-73403
WordPress User Registration plugin <= 5.2.6 - Broken Access - CVE-2026-52701
WordPress User Registration plugin <= 5.2.2 - Broken Access - CVE-2026-25425
WordPress User Registration plugin <= 5.1.2 - Broken Access - CVE-2026-42652
WordPress User Registration plugin <= 5.1.5 - Cross Site Scr - CVE-2026-32488
WordPress User Registration plugin <= 4.4.9 - Privilege Esca
Same vendor: wpeverest
- CVE-2026-74001
WordPress User Registration & Membership Pro plugin <= 5.4.5 - CVE-2026-13167
Everest Forms – Contact Form, Payment Form, Quiz, Survey & C - CVE-2026-73403
WordPress User Registration plugin <= 5.2.6 - Broken Access - CVE-2026-12124
PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated - CVE-2026-57312
WordPress Everest Forms plugin <= 3.4.8 - Reflected Cross Si
Same weakness: CWE-290
- CVE-2026-71485
Centrifugo: Client-forgeable headers emulation lets any clie - CVE-2026-69183
Monkeytype: Rate-limit and anti-brute-force controls bypassa - CVE-2026-76356
Authentication Bypass through IP Address Spoofing in the Aut - CVE-2026-72816
go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware - CVE-2026-72815
go-chi chi v5.2.1 IP Spoofing via X-Forwarded-For Header
V. Comments for CVE-2026-73995
No comments yet