{"id":"CVE-2026-110030","title":"Hide Price Until Login < 1.1.2 - Unauthenticated Account Creation via Guest Registration","summary":"The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honour the site's user-registration setting, allowing anyone to create a WordPress account and obtain a logged-in sessio…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"adp","cwe":["CWE-862"],"product":"Hide Price Until Login","affected":["hide_price_until_login < 1.1.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-29T10:50:47.494452Z"},"published":"2026-10-29","updated":"2026-10-29","sourceUpdated":"2026-10-29T10:56:07.177Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110030","references":[{"url":"https://wpscan.com/vulnerability/31d88b39-9d79-4e56-9af1-424d4d404cd2/"}],"tags":["cve.org"],"epss":0.00214,"epssPercentile":0.11838,"ingestedAt":"2026-11-01T17:57:46.220Z","slug":"CVE-2026-110030","body":"## Overview\n\nThe Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honour the site's user-registration setting, allowing anyone to create a WordPress account and obtain a logged-in session even when registration is disabled.\n\n## Affected\n\n- `hide_price_until_login < 1.1.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}