Simple User Registration
Monthly
Privilege escalation in the Simple User Registration plugin for WordPress up to version 6.3 allows unauthenticated attackers to register as administrators by sending crafted user meta values. A publicly available exploit exists, and the EPSS score of 29.28% indicates a high likelihood of exploitation, though it has not yet been added to CISA's Known Exploited Vulnerabilities catalog. Successful exploitation grants full control over the affected WordPress site.
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Privilege escalation in the Simple User Registration plugin for WordPress up to version 6.3 allows unauthenticated attackers to register as administrators by sending crafted user meta values. A publicly available exploit exists, and the EPSS score of 29.28% indicates a high likelihood of exploitation, though it has not yet been added to CISA's Known Exploited Vulnerabilities catalog. Successful exploitation grants full control over the affected WordPress site.
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.