CVE-2026-15369

The Custom User Registration Fields for WooCommerce plugin for WordPress (versions up to and including 2.2.3 ) is vulnerable to Privilege Escalation . The flaw exists because the af_reg_checkout_data_to_order_meta_data_block() function accepts an unauthenticated, attacker-controlled afreg_select_...