CVE-2026-110030
CVE-2026-110030 · Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honour the site's user-registration setting, allowing anyone to create a WordPress account and obtain a logged-in session even when registration is disabled.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
hide price until login
- Versions
- ≥ 0, < 1.1.2: Affected (semver)
Update to 1.1.2