CyberRota Analysis
AI-GeneratedThe Custom Fields Account Registration for WooCommerce plugin for WordPress prior to version 1.4 is vulnerable, allowing unauthenticated users to exploit custom registration fields to gain administrator privileges on sites with non-default database table prefixes. This flaw poses a significant security risk, as it can lead to unauthorized access and control over the affected WordPress sites. Website administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured.