CVE-2024-8420

Name of the Vulnerable Software and Affected Versions DHVC Form plugin for WordPress versions prior to 2.4.8

Description The issue allows unauthenticated attackers to register as administrators on sites due to the plugin permitting users to supply the role field when registering.

Recommendations For versions prior to 2.4.8, update to version 2.4.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the user registration functionality until the update is applied.