CVE-2024-49247

Name of the Vulnerable Software and Affected Versions BuddyPress Better Registration versions 1.6 and earlier BuddyPress Better Registration version 1.7 is not affected, as it contains the fix for the issue.

Description The issue is an Authentication Bypass Using an Alternate Path or Channel vulnerability, which allows attackers to bypass authentication. This flaw is present in the BuddyPress Better Registration plugin.

Recommendations For BuddyPress Better Registration versions 1.6 and earlier: Update to version 1.7 to fix this issue. As a temporary workaround, consider restricting access to sensitive areas of the plugin until the update is applied.