Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-49604 EUVD-2024-43467GHSA-qwpx-5prv-xmxx

WordPress Simple User Registration plugin <= 6.7 - Broken Authentication vulnerability

Published Oct 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in N-Media Simple User Registration wp-registration allows Authentication Bypass.This issue affects Simple User Registration: from n/a through <= 6.7.

Affected products

VendorProductAffectedFixed
N-Media Simple User Registration ≤ 6.7 —

References