What is GHSA-6927-4v43-q88g?

GHSA-6927-4v43-q88g is a security advisory published by GitHub Security Advisories with unknown severity. The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not...

Which CVE IDs does GHSA-6927-4v43-q88g cover?

GHSA-6927-4v43-q88g covers the following CVE IDs: CVE-2026-13152. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-6927-4v43-q88gunknown

The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-13152 →

📋 Description

The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13152
https://wpscan.com/vulnerability/36aaba38-3143-4e80-8386-748632ff6704
https://github.com/advisories/GHSA-6927-4v43-q88g