Export limit exceeded: 228260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 228260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 228260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 228260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 228260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-119075 2 Themegrill, Wordpress-extensions 2 Registration Form For Woocommerce, Registration Form For Woocommerce 2026-11-12 9.8 Critical
The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validate_checkout_fields() function in versions up to, and including, 1.1.4 The My Account registration path (validate_fields()) validates a submitted 'tgwcfb/user-roles' value against the form's configured allowed roles, but the checkout registration path (validate_checkout_fields(), hooked to woocommerce_after_checkout_validation) stores the raw $_POST['user_roles'] value in $this->valid_data without any allow-list enforcement, and add_user_data() then injects that value into woocommerce_new_customer_data as the new account's role. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by supplying a user_roles=administrator parameter when creating an account during checkout, resulting in full site takeover.