4 matches found
CVE-2026-119075
The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validatecheckoutfields function in versions up to, and including, 1.1.4 The My Account registration path validatefields validates a submitted...
CVE-2026-119075 Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout
The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validatecheckoutfields function in versions up to, and including, 1.1.4 The My Account registration path validatefields validates a submitted...
CVE-2026-119075
The Registration Form for WooCommerce plugin for WordPress (versions valid_data. This allows an unauthenticated attacker to supply a user_roles=administrator parameter during account creation at checkout, resulting in the injection of the administrator role and a full site takeover .
EUVD-2026-119150
The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validatecheckoutfields function in versions up to, and including, 1.1.4 The My Account registration path validatefields validates a submitted...