{"id":"CVE-2026-25450","kind":"vulnerability","aliases":["CVE-2026-25450"],"related":[],"title":"User Registration WordPress plugin: missing authorization check exposes access control","description":"Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.","summary":"The ThemeGrill User Registration WordPress plugin has a missing authorization check, so access control settings can be exploited when misconfigured. The sources do not say exactly which data or actions an attacker gets.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","themegrill","user-registration","wordpress"],"not_affected_if":["plugin-newer-than-5.3.0"],"how_to_check":"- Check the installed version of the User Registration plugin in the WordPress admin under Plugins, and compare it with the affected range.\n- Review the plugin's access control and role settings for restricted content or registration options.","fix":"- Move the User Registration plugin to a version later than `5.3.0`.","status":"open","published_at":"2026-10-29T15:17:22+00:00","first_seen_at":"2026-10-29T15:25:39+00:00","triaged_at":"2026-10-29T15:26:55+00:00","updated_at":"2026-10-29T15:26:55+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-29T15:26:55Z","model":"claude-haiku-5-5","output":{"fix":"- Move the User Registration plugin to a version later than `5.3.0`.","reach":"internet","title":"User Registration WordPress plugin: missing authorization check exposes access control","impact":"medium","summary":"The ThemeGrill User Registration WordPress plugin has a missing authorization check, so access control settings can be exploited when misconfigured. The sources do not say exactly which data or actions an attacker gets.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","user-registration","themegrill"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unauthorized users reach access-restricted content or actions","analyst_note":"Check the NVD entry and the ThemeGrill changelog for the exact unauthorized action and the fixed version.","how_to_check":"- Check the installed version of the User Registration plugin in the WordPress admin under Plugins, and compare it with the affected range.\n- Review the plugin's access control and role settings for restricted content or registration options.","plain_action":"","needs_analyst":true,"not_affected_if":["plugin-newer-than-5.3.0"],"who_is_affected":"Sites running the User Registration plugin version 5.3.0 or earlier, where access control levels are configured. The sources do not say which configurations are exposed, so sites without the plugin or on a newer version can skip it.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000668,"input_tokens":4106,"output_tokens":515,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-25450':13A,16A '5.3.0':81C 'access':9A,35B,70C 'action':52B 'affect':75C 'allow':66C 'attack':54B 'author':6A,32B,57C 'check':7A,33B 'configur':69C 'control':10A,36B,71C 'cve':11A,14A 'data':50B 'exact':48B 'exploit':40B,67C 'expos':8A 'get':55B 'incorrect':68C 'issu':74C 'levels.this':73C 'misconfigur':42B 'miss':5A,31B,56C 'n/a':79C 'packag':17B 'plugin':4A,28B 'registr':2A,21B,26B,62C,65C,77C 'say':47B 'secur':72C 'set':37B 'sourc':44B 'themegril':18B,24B,60C 'user':1A,20B,25B,61C,64C,76C 'user-registr':19B,63C 'vulner':58C 'wordpress':3A,22B,27B","nicknames":[],"mitigations":[],"who_affected":"Sites running the User Registration plugin version 5.3.0 or earlier, where access control levels are configured. The sources do not say which configurations are exposed, so sites without the plugin or on a newer version can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-29T15:17:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-25450","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25450","severity":null,"published_at":"2026-10-29T15:17:22+00:00","modified_at":"2026-10-29T15:18:54+00:00","first_seen_at":"2026-10-29T15:25:39+00:00","fetched_at":"2026-10-29T15:25:39+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}