Exploit for CVE-2026-13152

CVE-2026-13152: Unauthenticated Privilege Escalation in Custom...

CVE-2026-13152

The Custom Fields Account Registration For WooCommerce WordPress plugin (versions before 1.4 ) is vulnerable to an unauthenticated privilege escalation flaw. The root cause is that the plugin fails to sanitize or whitelist protected user meta keys, such as wp_capabilities or wp_user_level, when p...