CVE-2026-11802 FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action

The FoodBook Lite - Online Food Ordering System plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.6. The registration function, accessible via the wpajaxnoprivregistrationaction AJAX action, lacks any nonce verification or capability check, and...

CVE-2024-10393

CVE-2024-10393 affects the WordPress Tutor LMS plugin, vulnerable in versions

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52871

The CVE-2024-52871 issue affects Flagsmith up to version 2.134.1, where the ALLOW_REGISTRATION_WITHOUT_INVITE setting can be bypassed. The vulnerability concerns the open-source Flagsmith product (feature flagging/remote configuration) and involves bypassing the invitation-requirement for registr...

VulnCheck KEV: CVE-2016-8870

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...