CVE-2026-15369 | Addify Custom User Registration Fields for WooCommerce Plugin /wc/store/v1/checkout af_reg_custom_order_processing_function privileges management

A vulnerability was found in Addify Custom User Registration Fields for WooCommerce Plugin up to 2.2.3 on WordPress and classified as critical. Impacted is the function af_reg_custom_order_processing_function of the file /wc/store/v1/checkout. Executing a manipulation of the argument afreg_select_user_role can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-15369. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More