CVE-2024-32511 CRITICAL

CVE-2024-32511: WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability

Vendor Astoundify
Product Simple Registration for WooCommerce
Weakness CWE-269
Published May 17, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Privilege Management vulnerability in Astoundify Simple Registration for WooCommerce allows Privilege Escalation.This issue affects Simple Registration for WooCommerce: from n/a through 1.5.6.

Explanation of Vulnerability in Simple Terms

02Summary

Simple Registration for WooCommerce versions up to 1.5.6 contain a privilege management flaw that allows unauthenticated attackers to gain unauthorized access and modify site data. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update immediately to a version newer than 1.5.6.

What an attacker can do

03Attacker Capabilities

Run unauthorized actions on the site, read sensitive data, and modify or delete content without authentication.

Potential impact on your site

04Site Impact

Attackers can compromise your WooCommerce site, steal customer data, modify products, and disrupt operations without logging in.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

May 17, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2026-1993 ExactMetrics 7.1.0 - 9.0.2 - Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update CVE-2025-12981 Listee <= 1.1.6 - Unauthenticated Privilege Escalation CVE-2026-12415 Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter CVE-2025-15027 JAY Login & Register <= 2.6.03 - Unauthenticated Privilege Escalation via jay_login_register_ajax_create_final_user CVE-2026-5144 BuddyPress Groupblog <= 1.9.3 - Authenticated (Subscriber+) Privilege Escalation to Administrator via Group Blog IDOR