CVE-2024-11951

CVE-2024-11951 affects the WordPress plugin “Homey Login Register.” The issue: unauthenticated users who register new accounts can set their own role, enabling privilege escalation to administrator. Affected versions: up to and including 2.4.0. Exploitation details are not provided in the initial...