WordPress AS Password Field In Default Registration Form plugin <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover vulnerability

Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by Drew Webber mcdruid in WordPress Plugin AS Password Field In Default Registration Form versions = 2.0.0...

CVE-2025-14996

creationtimestamp| type| source ---|---|--- 2026-01-06 05:43:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbqanetrfw2p 2026-01-06 06:01:28+00:00| seen| Telegram/C8cKa5CH9I3NM3jeEU5QbxYCnFxc-EFqHQ9i2kT9Led6pw 2026-01-06 07:32:43+00:00| seen|...