CVE-2023-3371

Summary

CVE-2023-3371 is a vulnerability affecting the User Registration plugin for WordPress. The issue stems from hardcoded encryption keys in the 'lock_content_form_handler' and 'display_password_form' functions, which are present in versions 3.7.3 and below. This vulnerability exposes sensitive information as unauthenticated attackers are able to decrypt and view password-protected content due to the hardcoded keys. WordPress users are urged to update to the latest version of this plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.