CVE-2026-103076: Cross-Site Request Forgery (CSRF) in ThemeGrill User Registration

The ThemeGrill User Registration plugin contains a CSRF vulnerability that enables attackers to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized changes or disruptions. The affected versions include all releases from initial versions up to but not including 5.3.0. The vulnerability does not affect confidentiality but can impact integrity and availability. No patch information or vendor advisory is available, so the patch status is not confirmed.

Successful exploitation could allow attackers to perform unauthorized actions via forged requests, impacting the integrity and availability of the affected system. Confidential data is not directly compromised. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or limiting exposure of the affected functionality.