The RegistrationMagic WordPress plugin up to version 6.0 allows unauthenticated privilege escalation, enabling attackers to create admin accounts and take over WordPress sites.
PHP
WordPress
Privilege Escalation
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.1%
The WooCommerce mobile phone registration plugin has an authentication bypass vulnerability allowing unauthenticated attackers to log in as any user, including administrators, with EPSS 0.42%.
PHP
WordPress
Authentication Bypass
NVD
CVSS 3.1
9.8
EPSS
0.4%