CVE-2024-54363 WordPress Wp NssUser Register plugin <= 1.0.0 - Privilege Escalation vulnerability
An attacker can escalate privileges due to incorrect privilege assignment in the Wp NssUser Register WordPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-54363?
CVE-2024-54363 is a critical vulnerability in saiful.total Wp NssUser Register, published on 16 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through <= 1.0.0.
Weakness: CWE-266
Which versions are affected by CVE-2024-54363?
How do I fix CVE-2024-54363?
No fix has been published for CVE-2024-54363 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-54363 being exploited?
There is no known exploitation of CVE-2024-54363 in the wild and no public exploit code.
Public exploit code: 2 proofs of concept on GitHub.
Sources
Also known as GHSA-wx4q-8vh8-7998.