PT-2026-22113

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2 via the 'register member' function, due to missing validation on the 'member id' user...

CVE-2025-4179: Missing Authorization

The Flynax Bridge plugin for WordPress is vulnerable to limited Privilege Escalation due to a missing capability check on the registerUser function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to register new user accounts as authors...

CVE-2025-1474

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user accou...

VulnCheck KEV: CVE-2024-7097

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings...

Design/Logic Flaw

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled...

Stored XSS Vulnerability at XXL-JOB Added User

XXL-JOB is a lightweight distributed task scheduling platform whose core design goals are rapid development, simple learning, lightweight and easy to extend. A stored XSS vulnerability exists at XXL-JOB new users, which can be exploited by an attacker to obtain user cookie information...

Applied Watch Command Center 1.0 Authentication Bypass Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console. Successful exploitation of these...

PT-2011-4432 · Microsoft · Windows Media Center +5

Name of the Vulnerable Software and Affected Versions: Windows Media Player versions in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 Description: A remote code execution issue exists in the way Windows Media Player and Windows Media Center handle .dvr-ms files...

CVE-2008-2348

The CVE-2008-2348 entry describes a vulnerability in MeltingIce File System 1.0 where remote attackers can bypass authentication and perform administrative actions (create new user accounts and exceed application quotas) via a direct request to admin/adduser.php. The associated data indicate netw...

Applied Watch Command Center 1.0 - Authentication Bypass (1)

Applied Watch Command Center 1.0 - Authentication Bypass 1 // source: https://www.securityfocus.com/bid/9124/info A vulnerability has been identified in the system that may allow an attacker to bypass authentication to add attacker supplied IDS alerts and new user accounts in the console...

CVE-1999-0310: Undefined Security Weakness

SSH 1.2.25 on HP-UX allows access to new user accounts...

PT-1998-1068 · Hewlett Packard · Hp-Ux Ssh

Name of the Vulnerable Software and Affected Versions: HP-UX SSH version 1.2.25 Description: The issue allows access to new user accounts on the system. Recommendations: For HP-UX SSH version 1.2.25, update to a newer version that addresses this issue to prevent unauthorized access to new user...