CVE-2026-81431: Improper Privilege Management

The Registration Form for WooCommerce WordPress plugin before 1.1.3 does not validate that the form referenced during registration is a legitimate registration form, reading the permitted-role allow-list from an arbitrary attacker-controlled post instead. A user able to create a post Contributor...

CVE-2026-54807: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Registration Form for WooCommerce = 1.0.9 versions...