Search vulnerabilities

Results 1

Export CSV
CVE-2026-110030

Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration

The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honour the site's user-registration setting, allowing anyone to create a WordPress account and obtain a logged-in session even when registration is disabled.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed