All 2 CVE vulnerabilities found in Custom User Registration Fields for WooCommerce, with AI-generated Chinese analysis, references, and POCs.
Vendor: Addify
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15369 | Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout CWE-269 | 9.8 | Critical | 2026-08-29 |
| CVE-2025-60207 | WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability CWE-434 | 10.0 | Critical | 2025-11-06 |
All 2 known CVE vulnerabilities affecting Custom User Registration Fields for WooCommerce with full Chinese analysis, references, and POCs where available.