Unauthorized Account Creation in Hide Price Until Login Plugin for WordPress
CVE-2026-110030
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 29 October 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-110030?
The Hide Price Until Login plugin for WordPress, before version 1.1.2, contains a security flaw that permits unauthorized users to register for an account. This vulnerability arises from a poorly restricted guest-registration handler, which fails to respect the site's user-registration settings. Consequently, even if user registration is disabled, anyone can create a WordPress account and gain a logged-in session, potentially allowing them to access restricted content and features.
Affected Version(s)
Hide Price Until Login 0 < 1.1.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.