What is GHSA-f66r-cp58-ph5f?

GHSA-f66r-cp58-ph5f is a security advisory published by GitHub Security Advisories with Medium severity. The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration...

Which CVE IDs does GHSA-f66r-cp58-ph5f cover?

GHSA-f66r-cp58-ph5f covers the following CVE IDs: CVE-2026-104671. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f66r-cp58-ph5f?

GHSA-f66r-cp58-ph5f has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-f66r-cp58-ph5fMediumCVSS 5.3

The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-104671 →

📋 Description

The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration setting in one of its AJAX registration handlers, allowing unauthenticated visitors to create WordPress user accounts even when user registration is disabled.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-104671
https://wpscan.com/vulnerability/6ecea67e-8019-4ef2-bd27-a9da7dc27d43
https://github.com/advisories/GHSA-f66r-cp58-ph5f