CVE-2024-49604 is an authentication bypass vulnerability in the N-Media Simple User Registration WordPress plugin (versions up to 6.7). The vulnerability allows attackers to bypass authentication mechanisms by leveraging an alternate path or channel within the plugin's registration functionality. This can lead to unauthorized access with full control over the affected system's confidentiality, integrity, and availability. The CVSS 3.1 base score is 9.8, reflecting a network attack vector with no privileges or user interaction required. Currently, no patch or official remediation guidance has been published by the vendor.

Successful exploitation of this vulnerability allows an attacker to bypass authentication controls, potentially gaining unauthorized access to the system. This can result in full compromise of confidentiality, integrity, and availability of the affected environment. Given the critical CVSS score of 9.8, the impact is severe, enabling attackers to perform actions as authenticated users without proper authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the Simple User Registration plugin if feasible, or restrict access to the affected functionality through other means. Monitor vendor communications for updates and apply patches promptly once available.