CVE-2026-73995
Received Received - Intake

Subscriber Broken Authentication in User Registration

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Patchstack

Description
Subscriber Broken Authentication in User Registration <= 5.2.6 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-73995
EUVD
EUVD-2026-60809

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wp_user_registration wordpress_user_registration_plugin to 5.2.7 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-290 This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Broken Authentication issue in the WordPress User Registration Plugin versions 5.2.6 and below. It allows subscribers with low privileges to perform actions normally restricted to higher-privileged users, potentially gaining admin access to the website.

Detection Guidance

Detecting this vulnerability requires checking the installed version of the User Registration plugin. Use the WordPress admin dashboard to view the plugin version or run SQL queries on the database to check the version stored in the wp_options table. Alternatively, use WP-CLI commands like 'wp plugin list' to list installed plugins and their versions.

Impact Analysis

Attackers could exploit this to escalate their privileges from a subscriber to an admin, allowing them to take control of the website. This could lead to unauthorized changes, data theft, or further attacks on visitors.

Mitigation Strategies

Immediately update the User Registration plugin to version 5.2.7 or later. If updating is not possible, apply Patchstack's automatic mitigation rule to block attacks until the update is applied. Contact your hosting provider or developer for assistance if needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73995. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart