CVE-2021-25973: Publify Project Publify

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only.

Affected products

• Publify Project Publify: from 9.0.0, up to and including 9.2.4

Published 2021-11-02. Last modified 2026-06-17.