What is CVE-2024-1991?

CVE-2024-1991 is a high-severity vulnerability affecting the RegistrationMagic plugin for WordPress, which allows authenticated attackers with subscriber-level access to escalate their privileges to administrator level. This vulnerability impacts all versions of the plugin up to and including 5.3.0.0, and it primarily affects WordPress websites using the RegistrationMagic plugin. It's essential for users to update their plugin to a patched version to protect their websites from potential attacks.

Who is impacted by CVE-2024-1991?

Authenticated attackers with subscriber-level access or higher can exploit this vulnerability to escalate their privileges to administrator level. In simpler terms, if someone has basic access to your website and it's using a vulnerable version of the plugin, they could potentially gain full control over your site.

What to do if CVE-2024-1991 affected you

If you're affected by the CVE-2024-1991 vulnerability, it's crucial to take action to protect your WordPress website. Update the RegistrationMagic plugin to version 5.3.1.0 or a newer patched version. Ensure all user accounts have appropriate access levels. Regularly check for updates and apply them promptly.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-1991 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. T

Weakness Enumeration

The weakness enumeration for this vulnerability is "Insufficient Information", indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources below.

• Wordfence Vulnerability Details

• CVE Record