Skip to content
OpenAdvisories

Vendor

Addify

4 known vulnerabilities.

Products

Custom User Registration Fields for WooCommerce 2 Request a Quote for WooCommerce 1 Tax Exempt for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-18143 Public exploit Scanner template

    Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

    The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.9.2 via the `afrfq_submit_quote_via_popup()` function. This is due to missing file extension and MIME type validation in th…

    Addify Request a Quote for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2026-15369

    Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout

    The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenti…

    Addify Custom User Registration Fields for WooCommerce Web / CMS
  • Critical 10.0
    CVE-2025-60207

    WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for W…

    Addify Custom User Registration Fields for WooCommerce Web / CMS