Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-13152

Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation

The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Silverplugins217 Wordpress
Products
Custom Fields Account Registration For Woocommerce Wordpress
CVE-2025-49379

WordPress Custom Fields Account Registration For Woocommerce plugin <= 1.2 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Privilege Escalation.This issue affects Custom Fields Account Registration For Woocommerce: from n/a through <= 1.2.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Silverplugins217 Woocommerce Wordpress
Products
Custom Fields Account Registration For Woocommerce Woocommerce Wordpress