CVE-2026-120840

MEDIUM 4.3CVE-2026-120840 · Published 07/11/2026 · updated 07/11/2026

In short

CVE-2026-120840 is a MEDIUM (CVSS 4.3) vulnerability.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.

References

patchstack.com/database/wordpress/plugin/user-registration/vulnerability/wordpress-user-registration-plugin-5-3-0-broken-access-control-vulnerability-2

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free