What’s Vulnerable › Products

Addify Custom User Registration Fields for WooCommerce vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Addify Custom User Registration Fields for WooCommerce version is affected

Latest Addify Custom User Registration Fields for WooCommerce vulnerabilities

• CVE-2026-15369 — Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout (CVSS 9.8)
• CVE-2025-60207 — WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability (CVSS 10.0)