CVE-2024-32511

🗓️ 17 May 2024 08:55:57Reported by PatchstackType

cve🔗 web.nvd.nist.gov👁 130 Views🌐 WEB

Improper privilege management in Astoundify Simple Registration for WooCommerce allows privilege escalatio

Reporter	Title	Published	Views	Family All 12
CNNVD	WordPress plugin Simple Registration for WooCommerce 安全漏洞	17 May 202400:00	–	cnnvd
Cvelist	CVE-2024-32511 WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability	17 May 202408:55	–	cvelist
EUVD	EUVD-2024-30313	3 Oct 202520:07	–	euvd
NVD	CVE-2024-32511	17 May 202409:15	–	nvd
Packet Storm	📄 WordPress WooCommerce Simple Registration 1.5.6 Unauthenticated Privilege Escalation	21 Jul 202600:00	–	packetstorm
Patchstack	WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability	15 Apr 202412:08	–	patchstack
Patchstack	WordPress Simple Registration for WooCommerce Plugin <= 1.5.6 is vulnerable to Privilege Escalation	15 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-24629 · Woocommerce · Simple Registration For Woocommerce	17 May 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-32511	5 Feb 202506:56	–	redhatcve
Vulnrichment	CVE-2024-32511 WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability	17 May 202408:55	–	vulnrichment

Vulners

Vulnrichment

Node

astoundify simple_registration_for_woocommerceRange≤1.5.6wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woocommerce-simple-registration",
    "product": "Simple Registration for WooCommerce",
    "vendor": "Astoundify",
    "versions": [
      {
        "lessThanOrEqual": "1.5.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/woocommerce-simple-registration/wordpress-simple-registration-for-woocommerce-plugin-1-5-6-unauthenticated-privilege-escalation-vulnerability

Parameter	Position	Path	Description	CWE
role	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
username	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
email	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
password	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
woocommerce-register-nonce	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
_wpnonce	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
register	request body	wcreg/	Front-end registration form submits role=administrator leading to privilege escalation.	CWE-269
log	request body	wp-login.php	Login attempt for the newly created user to verify administrative access.	CWE-269
pwd	request body	wp-login.php	Login attempt for the newly created user to verify administrative access.	CWE-269
wp-submit	request body	wp-login.php	Login attempt for the newly created user to verify administrative access.	CWE-269

17 Jun 2026 07:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.00501

SSVC

CWE-269