Choose User Role at Registration for WooCommerce <= 1.3.2 - Unauthenticated Privilege Escalation
criticalThe Choose User Role at Registration for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.2. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for unauthenticated attackers to elevate their priv...
- CVSS:
- 9.8 (Wordfence)
- Affected:
- up to 1.3.2
- Fixed in:
- 1.3.3
- Disclosed:
- Sep 15, 2026