JNews WordPress Theme Unauthorized User Registration Vulnerability

A vulnerability exists in the JNews - WordPress Newspaper Magazine Blog AMP Theme, affecting all versions up to and including 11.6.6. The issue allows unauthorized user registration because the theme does not properly validate whether user registration is disabled before creating a new user through the register_handler() function. This flaw enables unauthenticated attackers to register users even when registration is turned off.

Impact

Exploitation of this vulnerability allows for unauthorized user registration, potentially leading to account creation and misuse.

Remediation

Users can update to version 11.6.7 or a newer patched version to address this vulnerability.