Skip to content
Threat Feed
Subscribe

Product

Custom User Registration Fields for WooCommerce (<= 2.2.3)

1 brief RSS
critical advisory

Privilege Escalation in Custom User Registration Fields for WooCommerce Plugin

An unauthenticated privilege escalation vulnerability (CVE-2026-15369) in Custom User Registration Fields for WooCommerce allows remote attackers to assign arbitrary user roles, including Administrator, by injecting malicious parameters during the checkout process.

Custom User Registration Fields for WooCommerce web wordpress privilege-escalation woocommerce
1r 1t 1c