CVE-2023-3342

The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server which may make remote code execution possible. This was partially patched in version 3.0.2 and fully patched in version 3.0.2.1.

• CWE-434

• https://lana.codes/lanavdb/c0a58dff-7a5b-4cc0-82d6-2255e61d801c/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/user-registration/tags/3.0.1/includes/functions-ur-core.php#L3156Patch
• https://plugins.trac.wordpress.org/changeset/2933689/user-registration/trunk/includes/functions-ur-core.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a979e885-f7dd-4616-a881-64f3d97c309d?source=cveThird Party Advisory
• http://packetstormsecurity.com/files/173434/WordPress-User-Registration-3.0.2-Arbitrary-File-Upload.htmlThird Party Advisory, VDB Entry
• https://lana.codes/lanavdb/c0a58dff-7a5b-4cc0-82d6-2255e61d801c/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/user-registration/tags/3.0.1/includes/functions-ur-core.php#L3156Patch
• https://plugins.trac.wordpress.org/changeset/2933689/user-registration/trunk/includes/functions-ur-core.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a979e885-f7dd-4616-a881-64f3d97c309d?source=cveThird Party Advisory

Published

Jul 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33409Minical 1.0.0 is vulnerable to Cross Site Request Forgery (C…6.5
• CVE-2023-3341The code that processes control channel messages sent to `na…7.5
• CVE-2023-33410Minical 1.0.0 and earlier contains a CSV injection vulnerabi…8.8
• CVE-2023-33411A web server in the Intelligent Platform Management Interfac…7.5
• CVE-2023-33412The web interface in the Intelligent Platform Management Int…8.8
• CVE-2023-33413The configuration functionality in the Intelligent Platform …8.8
• CVE-2023-3343The User Registration plugin for WordPress is vulnerable to …8.8
• CVE-2023-33438A stored Cross-site scripting (XSS) vulnerability in Wolters…5.4
• CVE-2023-33439Sourcecodester Faculty Evaluation System v1.0 is vulnerable …7.2
• CVE-2023-3344The Auto Location for WP Job Manager via Google WordPress pl…4.8
• CVE-2023-33440Sourcecodester Faculty Evaluation System v1.0 is vulnerable …7.2
• CVE-2023-33443Incorrect access control in the administrative functionaliti…9.8