{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/registration-form-for-woocommerce--1.1.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:registration_form_for_woocommerce_project:registration_form_for_woocommerce:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-119075"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Registration Form for WooCommerce (\u003c= 1.1.4)"],"_cs_severities":["critical"],"_cs_tags":["wordpress","plugin","privilege-escalation","web-application"],"_cs_type":"advisory","_cs_vendors":["WordPress"],"content_html":"\u003cp\u003eRegistration Form for WooCommerce versions 1.1.4 and earlier contain a critical privilege escalation vulnerability (CVE-2026-119075). The issue exists within the \u003ccode\u003eFormHandler::validate_checkout_fields()\u003c/code\u003e function, which fails to enforce an allow-list on the \u003ccode\u003euser_roles\u003c/code\u003e parameter during the checkout registration process. This allows an unauthenticated user to inject arbitrary role values, such as 'administrator', into the \u003ccode\u003ewoocommerce_new_customer_data\u003c/code\u003e array, resulting in unauthorized account creation with elevated privileges.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to gain administrative access to the WordPress site, leading to full site takeover.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u0026quot;Registration Form for WooCommerce\u0026quot; plugin to the latest version once a patch is released.\u003c/li\u003e\n\u003cli\u003eReview user account creation logs for suspicious activity involving administrative roles created during the checkout process.\u003c/li\u003e\n\u003cli\u003eAudit existing user accounts for unauthorized assignments of the Administrator role.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T14:44:22Z","date_published":"2026-11-07T14:44:22Z","id":"https://feed.craftedsignal.io/briefs/2026-11-woocommerce-priv-esc/","summary":"The Registration Form for WooCommerce plugin for WordPress contains an unauthenticated privilege escalation vulnerability in the checkout registration path, allowing attackers to assign arbitrary roles, including Administrator.","title":"Registration Form for WooCommerce: Privilege escalation vulnerability (CVE-2026-119075)","url":"https://feed.craftedsignal.io/briefs/2026-11-woocommerce-priv-esc/"}],"language":"en","title":"CraftedSignal Threat Feed - Registration Form for WooCommerce (\u003c= 1.1.4)","version":"https://jsonfeed.org/version/1.1"}