What is the CVSS score of CVE-2025-4334?

CVE-2025-4334 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 29.3%.

Which versions of Simple User Registration are affected by CVE-2025-4334?

Organizations using for WordPress is vulnerable to Privilege Escalation in all face critical risk from CVE-2025-4334, a improper privilege management vulnerability rated CVSS 9.8.

Is there a public PoC exploit available for CVE-2025-4334?

Yes, a public proof-of-concept exploit is available for CVE-2025-4334. Prioritise patching immediately. EPSS: 29.3%.

How to fix or mitigate CVE-2025-4334?

Within 24 hours: Identify all affected systems running for WordPress is vulnerable to Privilege Escalation in all and apply vendor patches immediately. Monitor vendor channels for patch availability.

Simple User Registration CVE-2025-4334

EUVD-2025-19388 CRITICAL

Improper Privilege Management (CWE-269)

2025-06-26 security@wordfence.com

WordPress Privilege Escalation Simple User Registration Wordpress Plugin Najeebmedia

9.8

CVSS 3.1 · Vendor: wordfence

Severity by source

Vendor (wordfence) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

9.8 CRITICAL

Network-accessible, low complexity, no privileges required, no user interaction, scope unchanged, full impact on confidentiality, integrity, availability.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (wordfence).

CVSS VectorVendor: wordfence

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 12:48 vuln.today

EUVD ID Assigned

Mar 15, 2026 - 23:54 euvd

EUVD-2025-19388

CVE Published

Jun 26, 2025 - 02:15 nvd

CRITICAL 9.8

DescriptionCVE.org

The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to register as an administrator.

AnalysisAI

Privilege escalation in the Simple User Registration plugin for WordPress up to version 6.3 allows unauthenticated attackers to register as administrators by sending crafted user meta values. A publicly available exploit exists, and the EPSS score of 29.28% indicates a high likelihood of exploitation, though it has not yet been added to CISA's Known Exploited Vulnerabilities catalog. Successful exploitation grants full control over the affected WordPress site.

Technical ContextAI

The vulnerability resides in the registration process of the Simple User Registration plugin (CPE: cpe:2.3:a:najeebmedia:simple_user_registration:*:*:*:*:*:wordpress:*:*). The plugin fails to properly restrict user meta keys, specifically those controlling user capabilities like 'wp_capabilities', which can be injected during registration. This is a classic CWE-269 improper privilege management issue where insufficient sanitization of user-supplied metadata allows privilege escalation from unauthenticated user to administrator.

RemediationAI

Update the Simple User Registration plugin to the latest version immediately. The changeset at https://plugins.trac.wordpress.org/changeset/3327946/ indicates a fix has been committed; follow instructions in the Wordfence advisory or download the updated plugin from the official WordPress repository. If immediate patching is not possible, disable new user registration or restrict the registration form to authenticated users only. A web application firewall rule blocking requests that contain role-related user meta keys (e.g., wp_capabilities) during registration can serve as a temporary compensating control, though it may block legitimate plugin functionality.