5.3
Medium
CVE-2026-110030 The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not…
Description
The Hide Price Until Login WordPress plugin before 1.1.2 does not restrict a guest-registration handler and does not honour the site's user-registration setting, allowing anyone to create a WordPress account and obtain a logged-in session even when registration is disabled.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Hide Price Until Login 1.1 | earliest → < 1.1.2 | 1.1.2 |