EUVD-2025-202642

The WP CarDealer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.16. This is due to the 'WPCarDealerUser::processregister' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers t...

kernel: nfsd: don't ignore the return code of svc_proc_register()

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

CVE-2025-11533

CVE-2025-11533 (WP Freeio, WordPress) — Privilege escalation in WP Freeio is caused by the process_register() function not restricting user registration roles, allowing unauthenticated users to register as ‘administrator’ and gain admin access in all versions up to 1.2.21. The vulnerability is ra...

WordPress plugin WP Freeio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

nfsd: don't ignore the return code of svc_proc_register()

...

CVE-2025-2237

CVE-2025-2237 affects WP RealEstate (WordPress plugin) with authentication bypass via process_register in all versions up to 1.6.26, allowing unauthenticated attackers to register as Administrator. Root cause: insufficient role restrictions in the plugin. Impact, as stated by trusted sources: una...

PT-2025-14092 · WordPress · Wp Realestate

Name of the Vulnerable Software and Affected Versions: WP RealEstate plugin versions up to, and including, 1.6.26 Description: The issue is related to insufficient role restrictions in the process register function, allowing unauthenticated attackers to register an account with the Administrator...

WordPress WP Job Board Pro plugin <= 1.2.76 - Unauthenticated Privilege Escalation via process_register vulnerability

Unauthenticated Privilege Escalation via processregister vulnerability discovered by Foxyyy in WordPress Plugin WP Job Board Pro versions = 1.2.76...