plugin

Homey Login Register Vulnerabilities

4 known security issues reported for the Homey Login Register WordPress plugin. Most recent disclosed Mar 5, 2025.

2 critical

Running Homey Login Register on your site? Check whether your installed version is affected.

Scan your site free

Homey Login Register [homey-login-register] <= 2.4.0 (unfixed)

unknown

[en] The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creat...

Affected:
up to 2.4.0
Fix:
No patched version reported
Disclosed:
Mar 5, 2025

CVE-2024-11951 on NVD →

Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register

critical

The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating a...

CVSS:
9.8
Affected:
up to 2.4.0
Fix:
No patched version reported
Disclosed:
Mar 4, 2025

CVE-2024-11951 on NVD →

Homey Login Register [homey-login-register] <= 2.4.0 (unfixed)

unknown

[en] Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0.

Affected:
up to 2.4.0
Fix:
No patched version reported
Disclosed:
Jan 21, 2025

CVE-2024-51888 on NVD →

Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation

critical

The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

CVSS:
9.8
Affected:
up to 2.4.0
Fix:
No patched version reported
Disclosed:
Jan 13, 2025

CVE-2024-51888 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database