CVE-2026-13152

Summary (CVE-2026-13152): The WordPress plugin Custom Fields Account Registration For WooCommerce (pre-1.4) does not prevent custom registration fields from writing to the user capabilities meta key on sites using a non-default database table prefix. This allows an unauthenticated user who regist...