CVE-2026-119075

The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validatecheckoutfields function in versions up to, and including, 1.1.4 The My Account registration path validatefields validates a submitted...

CVE-2026-119075 Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout

The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validatecheckoutfields function in versions up to, and including, 1.1.4 The My Account registration path validatefields validates a submitted...

CVE-2026-119075

The Registration Form for WooCommerce plugin for WordPress (versions valid_data. This allows an unauthenticated attacker to supply a user_roles=administrator parameter during account creation at checkout, resulting in the injection of the administrator role and a full site takeover .

EUVD-2026-119150

The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validatecheckoutfields function in versions up to, and including, 1.1.4 The My Account registration path validatefields validates a submitted...

WordPress Registration Form for WooCommerce plugin <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout vulnerability

Unauthenticated Privilege Escalation to 'userroles' Parameter at Checkout vulnerability discovered by JB Sabit in WordPress Plugin Registration Form for WooCommerce versions = 1.1.4...