CVE-2025-3609 | Reales WP STPT Plugin up to 2.1.2 on WordPress User Registration reales_user_signup_form improper authorization

A vulnerability was found in Reales WP STPT Plugin up to 2.1.2 on WordPress and classified as critical. Affected by this issue is the function reales_user_signup_form of the component User Registration Handler. The manipulation leads to improper authorization.

This vulnerability is handled as CVE-2025-3609. The attack may be launched remotely. There is no exploit available.