Threats tagged 'ghsa-f92p-rvh5-3x75'

The Registration Form for WooCommerce plugin for WordPress versions up to and including 1.1.4 contains a privilege escalation vulnerability. This flaw arises from a missing allow-list check in the checkout registration path, allowing unauthenticated attackers to assign themselves the Administrator role during account creation at checkout. This results in full site takeover.