Homey Login Register [homey-login-register] <= 2.4.0 (unfixed)
unknown
[en] The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creat...
- Affected:
- up to 2.4.0
- Fix:
- No patched version reported
- Disclosed:
- Mar 5, 2025
CVE-2024-11951 on NVD →
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation in homey_register
critical
The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating a...
- CVSS:
- 9.8
- Affected:
- up to 2.4.0
- Fix:
- No patched version reported
- Disclosed:
- Mar 4, 2025
CVE-2024-11951 on NVD →
Homey Login Register [homey-login-register] <= 2.4.0 (unfixed)
unknown
[en] Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0.
- Affected:
- up to 2.4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 21, 2025
CVE-2024-51888 on NVD →
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
critical
The Homey Login Register plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.0. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
- CVSS:
- 9.8
- Affected:
- up to 2.4.0
- Fix:
- No patched version reported
- Disclosed:
- Jan 13, 2025
CVE-2024-51888 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database