CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.
Explanation of Vulnerability in Simple Terms
Simple User Registration versions 6.7 and earlier contain an authentication bypass vulnerability. An attacker can gain unauthorized access to the plugin without valid credentials, potentially compromising user data and site functionality. The vulnerability requires no user interaction and can be exploited remotely. Site administrators should update immediately to a version newer than 6.7.
What an attacker can do
Bypass authentication and gain unauthorized access to the plugin without valid credentials.
Potential impact on your site
Attackers can access user registration data, modify site settings, or compromise user accounts without logging in.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
