Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-110030

Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honour the site's user-registration setting, allowing anyone to create a WordPress account and obtain a logged-in session even when registration is disabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Hide Price Until Login

Default version status: unaffected

  • 0 to < 1.1.2affected

References