WordPress Plugin Vulnerabilities

Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user

Description

The plugin does not perform capability checks when creating users through an action available to unauthenticated visitors, and lets the caller choose the new account's role, allowing unauthenticated attackers to create administrator accounts and take over the site.

Proof of Concept

Affects Plugins

Plugin icon
ultimate-security-for-woocommerce
No known fix

References

CVE
CVE-2026-100109

Classification

Type
PRIVESC
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-269
CVSS
9.8 (critical)

Miscellaneous

Original Researcher
Afan
Submitter
Afan
Verified
Yes
WPVDB ID
b4d26eb3-ab32-456e-9f69-9ab300fdf44c

Timeline

Publicly Published
2026-11-03 (about 2 days ago)
Added
2026-11-03 (about 1 day ago)
Last Updated
2026-11-03 (about 1 day ago)

Other

Published
Title
Published
2026-08-12
Title
Essential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass Assignment
Published
2020-11-09
Title
Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta
Published
2026-10-01
Title
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin < 2.14.0 - Authenticated (Subscriber+) Privilege Escalation
Published
2025-10-30
Title
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
Published
2026-09-23
Title
YOP Poll < 7.0.11 - Unauthenticated Administrator Account Takeover via Origin Validation Error in '/auth/wp-login-redirect'