CVE-2024-10393

CVE-2024-10393 affects the WordPress Tutor LMS plugin, vulnerable in versions

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52871

The CVE-2024-52871 issue affects Flagsmith up to version 2.134.1, where the ALLOW_REGISTRATION_WITHOUT_INVITE setting can be bypassed. The vulnerability concerns the open-source Flagsmith product (feature flagging/remote configuration) and involves bypassing the invitation-requirement for registr...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

VulnCheck KEV: CVE-2016-8870

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...