CVE-2026-120840

MEDIUM NVD

CVSS Score 4.3

Severity MEDIUM

Published Nov 07, 2026

Vendor unknown

Description

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.

References

https://patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-3-0-broken-access-control-vulnerability-2?_s_id=cve