Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Unknown | TutorStarter | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 08 Oct 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-285 CWE-608 |
Thu, 08 Oct 2026 11:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-862 | |
| Metrics |
ssvc
|
Thu, 08 Oct 2026 10:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration setting in one of its AJAX registration handlers, allowing unauthenticated visitors to create WordPress user accounts even when user registration is disabled. | |
| Title | TutorStarter < 4.0.4 - Unauthenticated User Registration Bypass via AJAX | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2026-10-08T10:59:17.196Z
Reserved: 2026-10-02T07:59:21.083Z
Link: CVE-2026-104671
Vulnrichment
Updated: 2026-10-08T10:53:45.497Z
NVD
Status : Received
Published: 2026-10-08T11:16:44.303
Modified: 2026-10-08T11:16:44.303
Link: CVE-2026-104671
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-08T12:45:18Z