{"id":"CVE-2026-119522","kind":"vulnerability","aliases":["CVE-2026-119522"],"related":[],"title":"User Registration WordPress plugin: missing authorization check, access control bypass","description":"Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.1.","summary":"The ThemeGrill User Registration plugin for WordPress has a missing authorization check that allows access control to be exploited when security levels are incorrectly configured. An attacker may be able to perform actions they should not be permitted to perform.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","themegrill","user-registration","wordpress"],"not_affected_if":["default-config","plugin-not-installed"],"how_to_check":"- Look up the installed version of the User Registration plugin (WordPress admin, Plugins page) and see whether it is `5.3.1` or earlier.","fix":"- User Registration: fixed version unknown from the sources; the sources only state the affected range runs through `5.3.1`.","status":"open","published_at":"2026-11-07T18:17:16+00:00","first_seen_at":"2026-11-07T18:18:20+00:00","triaged_at":"2026-11-07T18:18:54+00:00","updated_at":"2026-11-07T18:18:54+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-07T18:18:54Z","model":"claude-haiku-5-5","output":{"fix":"- User Registration: fixed version unknown from the sources; the sources only state the affected range runs through `5.3.1`.","reach":"internet","title":"User Registration WordPress plugin: missing authorization check, access control bypass","impact":"medium","summary":"The ThemeGrill User Registration plugin for WordPress has a missing authorization check that allows access control to be exploited when security levels are incorrectly configured. An attacker may be able to perform actions they should not be permitted to perform.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","user-registration","themegrill"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown access to registration or account controls beyond intended permissions","analyst_note":"Find the fixed version and the exact access control setting from the NVD entry or the vendor advisory for User Registration 5.3.1.","how_to_check":"- Look up the installed version of the User Registration plugin (WordPress admin, Plugins page) and see whether it is `5.3.1` or earlier.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["default-config","plugin-not-installed"],"who_is_affected":"Sites running the User Registration plugin at version 5.3.1 or earlier are in the affected range. The sources say exposure depends on access control security levels being incorrectly configured, so sites using default settings may not be exposed. unknown whether the default configuration is affected.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000696,"input_tokens":4206,"output_tokens":551,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119522':13A,16A '-2026':12A,15A '5.3.1':88C 'abl':52B 'access':8A,37B,77C 'action':55B 'affect':82C 'allow':36B,73C 'attack':49B 'author':6A,33B,64C 'bypass':10A 'check':7A,34B 'configur':47B,76C 'control':9A,38B,78C 'cve':11A,14A 'exploit':41B,74C 'incorrect':46B,75C 'issu':81C 'level':44B 'levels.this':80C 'may':50B 'miss':5A,32B,63C 'n/a':86C 'packag':17B 'perform':54B,62B 'permit':60B 'plugin':4A,27B 'registr':2A,21B,26B,69C,72C,84C 'secur':43B,79C 'themegril':18B,24B,67C 'user':1A,20B,25B,68C,71C,83C 'user-registr':19B,70C 'vulner':65C 'wordpress':3A,22B,29B","nicknames":[],"mitigations":[],"who_affected":"Sites running the User Registration plugin at version 5.3.1 or earlier are in the affected range. The sources say exposure depends on access control security levels being incorrectly configured, so sites using default settings may not be exposed. unknown whether the default configuration is affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium","package","themegrill","userregistration","wordpress"],"campaign_type":null,"search_a":"'-119522':13A,16A '-2026':12A,15A 'access':8A 'author':6A 'bypass':10A 'check':7A 'control':9A 'cve':11A,14A 'miss':5A 'plugin':4A 'registr':2A 'user':1A 'wordpress':3A","search_b":"'abl':52B 'access':37B 'action':55B 'allow':36B 'attack':49B 'author':33B 'check':34B 'configur':47B 'control':38B 'exploit':41B 'incorrect':46B 'level':44B 'may':50B 'miss':32B 'packag':17B 'perform':54B,62B 'permit':60B 'plugin':27B 'registr':21B,26B 'secur':43B 'themegril':18B,24B 'user':20B,25B 'user-registr':19B 'wordpress':22B,29B","search_c":"'5.3.1':88C 'access':77C 'affect':82C 'allow':73C 'author':64C 'configur':76C 'control':78C 'exploit':74C 'incorrect':75C 'issu':81C 'levels.this':80C 'miss':63C 'n/a':86C 'registr':69C,72C,84C 'secur':79C 'themegril':67C 'user':68C,71C,83C 'user-registr':70C 'vulner':65C","first_public_at":"2026-11-07T18:17:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119522","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119522","severity":null,"published_at":"2026-11-07T18:17:16+00:00","modified_at":"2026-11-07T18:17:16+00:00","first_seen_at":"2026-11-07T18:18:20+00:00","fetched_at":"2026-11-07T18:18:20+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}