Skip to content
Security Alerts

CVE-2026-4882: Arbitrary file upload in WordPress User Registration Advanced Fields

The User Registration Advanced Fields plugin for WordPress (versions up to and including 1.6.20) allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution on the server...

Summary

ParameterValue
CVE IDCVE-2026-4882
Alert SourceGitHub Advisory - Critical Vulnerability
CVE Publication Year2026
Date Published2026-05-02
VendorWordPress
ProductUser Registration Advanced Fields (plugin)
CVSS Score9.8 (critical)
EPSS ScoreNo data
CISA KEVNo
RansomwareNot confirmed

Vulnerability Description

The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ‘URAF_AJAX::method_upload’ function in all versions up to, and including, 1.6.20. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible. Note: The vulnerability can only be exploited if a “Profile Picture” field is added to the form.

Required Actions

Update the User Registration Advanced Fields plugin to a version newer than 1.6.20 containing the patch immediately. Until the patch is deployed, remove the “Profile Picture” field from registration forms or fully disable the plugin. Scan the uploads directory for suspicious files (especially .php, .phtml) and review server logs for requests targeting the method_upload AJAX endpoint.

Who Is Affected?

This vulnerability affects User Registration Advanced Fields (plugin) for WordPress. Check whether your organization uses this plugin and whether forms include a “Profile Picture” field.

Sources


Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.

Learn More

Share:

Talk to an expert

Have questions about this topic? Get in touch with our specialist.

Sales Representative
Grzegorz Gnych

Grzegorz Gnych

Sales Representative

Response within 24 hours
Free consultation
Individual approach

Providing your phone number will speed up contact.

Want to Reduce IT Risk and Costs?

Book a free consultation - we respond within 24h

Response in 24h Free quote No obligations

Or download free guide:

Download NIS2 Checklist