CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in SK BuddyPress Better Registration better-bp-registration allows Authentication Bypass.This issue affects BuddyPress Better Registration: from n/a through <= 1.6.
Explanation of Vulnerability in Simple Terms
BuddyPress Better Registration versions 1.6 and earlier contain an authentication bypass vulnerability. An attacker can register accounts, modify user data, or delete content without valid credentials. The vulnerability requires no user interaction and can be exploited remotely. All sites running affected versions should update immediately.
What an attacker can do
Register accounts, modify user data, or delete site content without authentication.
Potential impact on your site
Unauthorized users can create accounts, alter user profiles, and delete content without logging in.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
