Critical severity9.8NVD Advisory· Published Jul 7, 2021· Updated Jun 17, 2026
CVE-2021-34621
CVE-2021-34621
Description
A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 3.0.0 - 3.1.3
- ProfilePress/ProfilePressv5Range: 3.0.0 - 3.1.3
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/163973/WordPress-ProfilePress-3.1.3-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.