CVE-2026-13152
Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured.
| Vendor | unknown |
| Product | custom fields account registration for woocommerce |
| Published | Jul 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown custom fields account registration for woocommerce
Be the first to know when new unknown vulnerabilities affecting unknown custom fields account registration for woocommerce are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Custom Fields Account Registration For Woocommerce
0 < 1.4
References
Credits
Huynh Kien Minh WPScan