Improper privilege management in Najeebmedia Memberhero
CVSS Skor
9.8
EPSS İhtimal
%2.6
Risk Skoru
0.3
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to register as an administrator.
Proof-of-concept exploit for CVE-2025-4334, a privilege escalation vulnerability in the Simple User Registration WordPress plugin (<= 6.3), allowing unauthenticated attackers to create administrator accounts.
Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
Nuclei: Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
İlgili Benzer Açıklar
Unrestricted file upload in Najeebmedia Frontend File Manager
Missing authentication in Najeebmedia Memberhero
Missing authorization in Najeebmedia Comments Extra Fields For Post, Pages And Cpt
Cross-site request forgery in Najeebmedia Comments Extra Fields For Post, Pages And Cpt
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-4334"