PT-2026-50360 · Themegrill+1 · Registration Form For Woocommerce

Park Hyun Woo

·

CVE-2026-54807

·

Published

2026-06-16

·

Updated

2026-06-17

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Registration Form for WooCommerce versions prior to 1.1.0
Description An issue exists in the Registration Form for WooCommerce plugin for WordPress that allows unauthenticated attackers to elevate their privileges to those of an administrator.
Recommendations Update the plugin to a version newer than 1.0.9.

Fix

Incorrect Privilege Assignment

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-54807

Affected Products

Registration Form For Woocommerce