The vulnerability CVE-2025-67956 affects the wpeverest User Registration plugin (versions up to 4.4.6) due to missing authorization checks. This flaw allows attackers to bypass access control mechanisms, potentially accessing or manipulating user registration functionality without proper permissions. The CVSS 3.1 base score is 8.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and an impact primarily on confidentiality (high) and integrity (low), with no impact on availability. No patch or official remediation guidance is currently available from the vendor.

Exploitation of this vulnerability could allow an unauthenticated attacker to bypass access controls in the User Registration plugin, leading to unauthorized access to sensitive user registration data or functionality. The confidentiality impact is high, meaning sensitive information could be exposed. Integrity impact is low, indicating limited ability to alter data. Availability is not affected. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor advisory or patch links are currently available. No specific mitigations are provided by the vendor at this time.