ByteOS Network

NVD Vulnerability Details :

CVE-2021-24649

Modified

Source-contact@wpscan.com

Published At-21 Nov, 2022 | 11:15

Updated At-30 Apr, 2025 | 14:15

The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpuf_encryption(). This could allow an attacker having access to the AUTH_KEY and AUTH_SALT constant (via an arbitrary file access issue for example, or if the blog is using the default keys) to create an account with any role they want, such as admin

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

weDevs Pte. Ltd.

>>wp_user_frontend>>Versions before 3.5.29(exclusive)

cpe:2.3:a:wedevs:wp_user_frontend:*:*:*:*:*:wordpress:*:*

References

Hyperlink	Source	Resource
https://wpscan.com/vulnerability/9486744e-ab24-44e4-b06e-9e0b4be132e2	contact@wpscan.com	Exploit Third Party Advisory
https://wpscan.com/vulnerability/9486744e-ab24-44e4-b06e-9e0b4be132e2	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory

Hyperlink: https://wpscan.com/vulnerability/9486744e-ab24-44e4-b06e-9e0b4be132e2

Source: contact@wpscan.com

Resource:

Exploit

Third Party Advisory

Hyperlink: https://wpscan.com/vulnerability/9486744e-ab24-44e4-b06e-9e0b4be132e2

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History