CVE-2022-3912 User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload
Unauthenticated attackers can upload arbitrary PHP files via an AJAX action, leading to remote code execution on the WordPress site.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-3912?
CVE-2022-3912 is a high-severity vulnerability in Unknown User Registration, published on 12 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.
Weakness: CWE-434
Which versions are affected by CVE-2022-3912?
It affects 1 product.
Products include Wpeverest User Registration.
How do I fix CVE-2022-3912?
No fix has been published for CVE-2022-3912 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-3912 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-3912 exists.
Other vulnerabilities in Unknown User Registration
- CVE-2023-3342 User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2023-3343 User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
- CVE-2025-1511 Cross-site scripting in User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- CVE-2023-23987 WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2021-24654 User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
Sources
Also known as GHSA-r7xp-c243-63mm.