Skip to content
Threat Feed
Subscribe

Product

Registration Form for WooCommerce (<= 1.1.4)

1 brief RSS
critical advisory

Registration Form for WooCommerce: Privilege escalation vulnerability (CVE-2026-119075)

The Registration Form for WooCommerce plugin for WordPress contains an unauthenticated privilege escalation vulnerability in the checkout registration path, allowing attackers to assign arbitrary roles, including Administrator.

Registration Form for WooCommerce wordpress plugin privilege-escalation web-application
1t 1c