← Back to browse · API

CVE-2021-34621

Severity
CRITICAL
CVSS
9.8
EPSS
0.68862
Risk score
63.3
CISA KEV
No
PoC
No
Published
2021-07-07
Modified
2024-10-15
First seen
2026-08-07
Aliases
EUVD-2021-21271, GHSA-H9QM-FW5R-9VMM
Products
ProfilePress Membership Team:ProfilePress 3.0.0 - 3.1.3
Sources
euvd EUVD-2021-21271

Description

A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .

References