PT-2025-52015 · WordPress · Custom Fields Account Registration For Woocommerce

Denver Jackson · Published 2025-12-18 · Updated 2025-12-20 · CVE-2025-49379

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Custom Fields Account Registration For Woocommerce versions n/a through 1.2

Description A flaw exists in Custom Fields Account Registration For Woocommerce that allows for privilege escalation due to incorrect privilege assignment. This issue impacts the application's security by potentially allowing unauthorized access or modification of sensitive data.

Recommendations Update Custom Fields Account Registration For Woocommerce to a version later than 1.2.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-49379

Affected Products

Custom Fields Account Registration For Woocommerce

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-49379 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/custom-fields-account-registration-for-woocommerce/vulnerability/wordpress-custom-fields-account-registration-for-woocommerce-plugin-1-2-privilege-escalation-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/custom-fields-account-registration-for-woocommerce/vulnerability/wordpress-custom-fields-account-registration-for-woocommerce-plugin-1-2-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2002466807085474253 · Twitter Post