CVE-2024-32511

🗓️ 17 May 2024 08:55:57Reported by PatchstackType

cve🔗 web.nvd.nist.gov👁 136 Views🌐 WEB

Improper privilege management in Astoundify Simple Registration for WooCommerce allows privilege escalatio

Reporter	Title	Published	Views	Family All 13
CNNVD	WordPress plugin Simple Registration for WooCommerce 安全漏洞	17 May 202400:00	–	cnnvd
Cvelist	CVE-2024-32511 WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability	17 May 202408:55	–	cvelist
EUVD	EUVD-2024-30313	3 Oct 202520:07	–	euvd
NVD	CVE-2024-32511	17 May 202409:15	–	nvd
Packet Storm	📄 WordPress WooCommerce Simple Registration 1.5.6 Unauthenticated Privilege Escalation	21 Jul 202600:00	–	packetstorm
Patchstack	WordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerability	15 Apr 202412:08	–	patchstack
Patchstack	WordPress Simple Registration for WooCommerce Plugin <= 1.5.6 is vulnerable to Privilege Escalation	15 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-24629 · Woocommerce · Simple Registration For Woocommerce	17 May 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-32511: Improper Privilege Management	17 May 202400:00	–	rapid7
RedhatCVE	CVE-2024-32511	5 Feb 202506:56	–	redhatcve

Vulners

Vulnrichment

Node

astoundify simple_registration_for_woocommerceRange≤1.5.6wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "woocommerce-simple-registration",
    "product": "Simple Registration for WooCommerce",
    "vendor": "Astoundify",
    "versions": [
      {
        "lessThanOrEqual": "1.5.6",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/woocommerce-simple-registration/wordpress-simple-registration-for-woocommerce-plugin-1-5-6-unauthenticated-privilege-escalation-vulnerability

Parameter	Position	Path	Description	CWE
role	request body	/wcreg/	Unauthenticated registration endpoint allows setting user role to administrator via role parameter.	CWE-269

17 Jun 2026 07:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.00501

SSVC

CWE-269