These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A Cross-site Scripting vulnerability in the eStore theme for WordPress allows Reflected XSS. This issue affects WordPress installations using the eStore theme from version n/a through 1.6.13. Defenders should assess exposure and prioritize verifying and implementing compensating controls to prevent XSS attacks. The CVE record and NVD entry provide limited information about the vulnerability, so defenders [truncated]
The CVE-2026-109699 vulnerability affects the WordPress User Registration plugin, specifically versions up to 5.2.8. This issue is related to a Missing Authorization vulnerability, which allows for Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability has a CVSS score of 5.4 and is classified as MEDIUM severity. Defenders responsible for WordPress installations using the User [truncated]
The CVE-2026-106598 vulnerability in the WordPress User Registration plugin allows sensitive data exposure due to a missing authorization issue. This issue affects the User Registration plugin from version n/a through 5.2.8. Defenders responsible for WordPress installations with the User Registration plugin should assess their exposure and verify the plugin version in use. The vulnerability has a medium s [truncated]
A Cross Site Scripting (XSS) vulnerability exists in the WordPress User Registration plugin versions up to 5.2.8. This issue allows for Stored XSS, potentially enabling attackers to inject malicious scripts into web pages. The vulnerability arises from improper neutralization of input during web page generation. Defenders managing WordPress environments with the User Registration plugin installed should a [truncated]
The CVE-2026-106597 vulnerability affects the WordPress User Registration plugin, specifically versions up to and including 5.2.8. This issue is related to a Missing Authorization vulnerability, which could potentially allow unauthorized access due to incorrectly configured access control security levels. Defenders should assess their exposure and consider updating the plugin. Verification of plugin versi [truncated]
A Cross Site Scripting (XSS) vulnerability exists in Magazine Blocks plugin versions up to 1.8.6. This CVE was published on 2026-08-24T12:16:55.960Z and last modified on 2026-10-12T15:10:00.207Z.
The Accelerate theme for WordPress has a vulnerability allowing unauthorized modification of data due to a missing capability check on the enqueue_scripts() function in all versions up to, and including, 1.5.3. Authenticated attackers with Subscriber-level access and above can install and activate the ThemeGrill Demo Importer plugin, potentially leading to unauthorized data modification and other security [truncated]
CVE-2026-54807 is a critical vulnerability in the Registration Form for WooCommerce plugin, with a CVSS score of 9.8. It allows for unauthenticated privilege escalation and affects versions <= 1.0.9. The vulnerability was published on 2026-06-17 and last modified on 2026-06-17. Users of this plugin should take immediate action to mitigate this vulnerability.
CVE-2026-49081 is a HIGH severity vulnerability (CVSS Score: 8.2) affecting the User Registration Stripe plugin versions <= 1.3.12. This vulnerability involves unauthenticated broken access control. The CVE was published on 2026-06-17T13:20:46.200Z and last modified on 2026-06-17T15:16:59.627Z. Users of the affected plugin should take immediate action to mitigate potential risks. This vulnerability allows [truncated]
CVE-2026-40726 is a HIGH severity vulnerability (CVSS Score: 8.2) in the User Registration Stripe plugin versions <= 1.3.14. This vulnerability involves unauthenticated broken access control, potentially allowing attackers to access sensitive user registration information. The vulnerability was published on June 17, 2026, and last modified on the same day. Organizations using this plugin should take immed [truncated]
CVE-2026-42743 is a MEDIUM-severity vulnerability affecting Masteriyo - LMS versions up to 2.1.8. The vulnerability is described as Unauthenticated Broken Authentication. The CVE record was published on 2026-06-15T21:16:57.117Z and was last modified on 2026-10-25T23:10:00.167Z. The NVD entry is currently Deferred.
CVE-2026-39524 is a HIGH severity vulnerability (CVSS Score: 7.5) in the Masteriyo - LMS plugin up to version 2.1.5. The vulnerability is caused by unauthenticated broken access control, which could allow attackers to bypass payment controls. The vulnerability was published on [cvePublishedAt] and last modified on [cveModifiedAt].
CVE-2026-25425 is a high severity vulnerability (CVSS Score: 7.5) affecting User Registration plugin versions <= 5.1.2. This vulnerability is categorized as Unauthenticated Broken Access Control. According to the [NVD detail resourceLinkAnnotations:nvd], the vulnerability has a CVSS vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The [CVE record resourceLinkAnnotations:cve-org] was published on 20 [truncated]
A HIGH severity vulnerability (CVSS 8.8) was found in Masteriyo - LMS, allowing for Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0.
A Missing Authorization vulnerability exists in ThemeGrill Demo Importer versions up to and including 2.0.0.6. This issue allows attackers to exploit incorrectly configured access control security levels. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. Defenders should assess their exposure and verify the configuration of their systems. The CVE record and NVD vulnerability [truncated]