Custom Fields Account Registration For WooCommerce < 1.4 - Unauthenticated Privilege Escalation

Description

The plugin does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured.