Medium severity5.3NVD Advisory· Published Sep 18, 2026

CVE-2026-90976

Description

The Clean Login WordPress plugin before 1.19 does not check whether user registration is enabled before creating an account in its registration handler, allowing unauthenticated users to create accounts even when the site has registration disabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Clean Loginllm-fuzzy
Range: <1.19

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e72f9529-6500-4ed2-a8cc-d77045b6be5c/nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000