CVE-2021-24649: WP User Frontend < 3.5.29 - Obscure Registration as Admin
The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpufencryption(). This could allow an attacker having access to the AUTHKEY and AUTHSALT constant (via an arbitrary file access issue for example, or if the blog is using the default keys) to create an account with any role they want, such as admin
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this WP User Frontend WordPress plugin vulnerability?
The vulnerability ID of this WP User Frontend WordPress plugin vulnerability is CVE-2021-24649.
What is the severity of CVE-2021-24649?
The severity of CVE-2021-24649 is critical with a CVSS score of 9.8.
What is the affected software of CVE-2021-24649?
The affected software of CVE-2021-24649 is the WP User Frontend WordPress plugin version up to 3.5.29.
What is the description of CVE-2021-24649?
CVE-2021-24649 is a vulnerability in the WP User Frontend WordPress plugin where the registration form's urhidden argument is used to create user accounts with a role, which can be exploited by attackers who have access to the AUTH_KEY and AUTH_SALT constant values.
How can I fix CVE-2021-24649?
To fix CVE-2021-24649, update the WP User Frontend WordPress plugin to version 3.5.29 or higher.