{"cvss":9.8,"datePublished":"2023-02-03T00:00:00Z","dateUpdated":"2023-02-03T00:00:00Z","description":"A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .","dueDate":"","id":"CVE-2021-34621","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"profilepress","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"properfraction profilepress Improper Privilege Management","vendor":"properfraction"}