Custom User Registration Fields for WooCommerce vulnerabilities

2 known vulnerabilities in Custom User Registration Fields for WooCommerce from Addify. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Custom User Registration Fields for WooCommerce: Improper Privilege Management

  CVE-2026-15369Aug 29, 2026Addify

  The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthentic

• 10.0 Critical severity

  Custom User Registration Fields for WooCommerce: Unrestricted Upload of File with Dangerous Type

  CVE-2025-60207Nov 6, 2025Addify

  Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for Wo