Threats tagged 'ghsa-rxc7-fx8m-jfjp'

The WPFunnels plugin for WordPress and WooCommerce allows unauthorized user registration in all versions up to and including 3.6.2. This occurs because the plugin uses a user-controlled parameter to decide if registration is allowed, ignoring the site's actual registration settings. As a result, attackers can create new user accounts even when registration is disabled.