Vulnerabilities

TI-2025-03863 CVE-2025-4334 · GHSA-6hwf-c64w-jxc6

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

MEDIUM 54

The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02588 Published 2025-06-26 No fix listed CWE-269

TI-2024-33090 CVE-2024-49604 · GHSA-qwpx-5prv-xmxx

WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability

MEDIUM 50

Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2024-10-20 No fix listed CWE-288

Vulnerabilities

Filters

Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation

WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability