Vulnerability · Published Sep 17, 2026 · Assigned by WPScan

CVE-2026-85128Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request

High 7.5

In plain English

A high-severity privilege mismanagement in Choose User Role at Registration from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 74.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved. Exploitation requires the Choose User Role at Registration WordPress plugin before 1.3.3's role selection feature and public account registration to both be enabled.

Affected products (as reported)

Vendor	Product	Versions
Unknown	Choose User Role at Registration	0 – before 1.3.3

Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References

https://wpscan.com/vulnerability/e48789a3-49b4-4fa4-8243-c242b79b9d9d/ exploit, vdb-entry, technical-description