CVE-2021-34621

CRITICAL EXPLOITED NUCLEI

ProfilePress 3.0.0-3.1.3 - Unauthenticated Privilege Escalation via Registration

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-34621 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including Numan Rajkotiya, navreet1425, K3ysTr0K3R. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit leverages an unauthenticated privilege escalation vulnerability in WordPress Plugin ProfilePress (CVE-2021-34621) by sending a crafted POST request to admin-ajax.php, allowing an attacker to create an administrator account.

Description

A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .

Exploits (4)

exploitdb WORKING POC
by Numan Rajkotiya · bashwebappsphp
https://www.exploit-db.com/exploits/50242

This exploit leverages an unauthenticated privilege escalation vulnerability in WordPress Plugin ProfilePress (CVE-2021-34621) by sending a crafted POST request to admin-ajax.php, allowing an attacker to create an administrator account.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: WordPress Plugin ProfilePress 3.0 - 3.1.3
No auth needed
Prerequisites: Target must have ProfilePress plugin version 3.0 - 3.1.3 installed · WordPress 4.7 or higher
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec STUB 4 stars
by navreet1425 · remote
https://github.com/navreet1425/CVE-2021-34621

The repository contains only a README.md with the CVE identifier and no exploit code or technical details. It is a placeholder with minimal content.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by K3ysTr0K3R · remote
https://github.com/K3ysTr0K3R/CVE-2021-34621-EXPLOIT

This repository contains a functional exploit for CVE-2021-34621, a privilege escalation vulnerability in the ProfilePress WordPress plugin. The exploit demonstrates how an attacker can register a new user with administrator privileges by manipulating the 'wp_capabilities[administrator]' parameter in the registration process.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: ProfilePress WordPress plugin versions 3.0.0 through 3.1.3
No auth needed
Prerequisites: Target must have the vulnerable ProfilePress plugin installed and active · Registration must be enabled on the WordPress site
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by RandomRobbieBF · remote
https://github.com/RandomRobbieBF/CVE-2021-34621

The repository contains a functional Python exploit for CVE-2021-34621, which leverages an unauthenticated privilege escalation vulnerability in ProfilePress (versions 3.0 to 3.1.3). The exploit sends a crafted POST request to register a user with administrator privileges by manipulating the 'wp_capabilities' parameter.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: ProfilePress WordPress plugin (3.0 - 3.1.3)
No auth needed
Prerequisites: Target WordPress site with vulnerable ProfilePress plugin · Network access to the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Nuclei Templates (1)

WordPress ProfilePress 3.0.0-3.1.3 - Admin User Creation Weakness
CRITICALby 0xsapra

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.6886
EPSS Percentile 99.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2023-02-03
CWE
CWE-269 CWE-306
Status published
Products (1)
properfraction/profilepress 3.0.0 - 3.1.3
Published Jul 07, 2021
Tracked Since Feb 18, 2026