CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
What the vulnerability does
Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Simple User Registration: from n/a through <= 5.5.
Explanation of Vulnerability in Simple Terms
Simple User Registration versions 5.5 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify or delete user data without permission. The vulnerability requires no user interaction and can be exploited over the network. Site administrators should update to a version newer than 5.5 immediately.
What an attacker can do
Modify or delete user accounts and registration data without logging in.
Potential impact on your site
User accounts can be altered or removed by anyone, compromising site integrity and user trust.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
