WP Register Profile With Shortcode
WP Register Profile With Shortcode has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.
3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
4 independent researchers contributed these findings, one record each. WP Register Profile With Shortcode is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-50042WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

WP Register Profile With Shortcode
Author
aviplugins.com
This is a simple registration form in the widget. The form is responsive. just install the plugin and add the register widget in the sidebar. Change some ‘optional’ settings in Settings-> WP Register Settings and you are good to go. Shortcodes Use this [rp_register_widget] shortcode to display registration form in post or page. Use This shortcode to retrieve user data [rp_user_data field=”first_name” user_id=”2″]. user_id can be blank. if blank then the data is retrieve from currently loged in user. Use this [rp_profile_edit] shortcode for user profile page. Logged in usres can edit profile data from this page. Use this [rp_update_password] shortcode to display Update Password form in your page. Other Optional Options Redirect users to a chosen page after successfull registration. Maybe to a thankyou page. Users can be logged in automatically after successful registration. Option can be enabled from admin panel. Enable password fields so that users can choose there own passwords. Otherwise password will be auto generated and mailed to user. Admin will get a notification email once a new user make registration in the site. Enable additional fields in the registration form like First Name, Last Name, Display Name, Website etc. Custom Registration/ Profile fields can be created in the PRO version of the plugin. WP Register Profile PRO The PRO version of this plugin has additional features like. Multiple registration forms can be created and each form can be assigned to different user Roles. So that when user make registration they are assigned to that perticular Role. Registration with support for adding additional custom fields. Custom registration fields can be sorted by Drag & Drop. User Profile page with custom fields. Here users can update their profile data. Create file type fields in Registration and Profile forms. Users can upload files to their profile. Uploadable file types can be allowed form plugin settings page. Reset user password shortcode. User profile data can be displayed easily with the help of shortcodes. Support for user profile image upload. Profile image can be used as Avatar. If this is enabled then profile image will be used as user Avatar throughout the site. When user posts a comment his profile image will be displayed instead of the defalut WordPress Avatar. Subscription option is available with the PRO version. Payment for subscription is managed by WooCommerce for ease of use. Users will be able to select subscription packages at the time of registration. etc You can get it here in USD 2.00 Post your plugin related queries at https://goplugins.in/support.php
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C