This vulnerability (CVE-2026-52701) is classified as CWE-862 (Missing Authorization) in the Themegrill User Registration plugin. It affects versions up to and including 5.2.2 and allows unauthenticated attackers to bypass access controls during the user registration process. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with low complexity, and impacts confidentiality and integrity but not availability. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

An attacker can exploit this vulnerability to bypass authorization controls in the user registration functionality, potentially allowing unauthorized access or manipulation of user registration data. The impact affects confidentiality and integrity but does not affect system availability. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. Avoid deploying or using affected versions in sensitive environments if possible.