{"vulnerability": "CVE-2026-15369", "sightings": [{"uuid": "991747aa-60df-4e40-98dd-3e56f045928e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mub6vfewxv2o", "content": "\ud83d\udd34 CVE-2026-15369 - Critical (9.8)\n\nThe Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privile...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15369/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T01:00:39.399424Z"}, {"uuid": "a5a871b6-3a5c-4e1d-a910-aeea39ed2490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/avyl7vh7eemf3", "content": "CVE-2026-15369 - Custom User Registration Fields for WooCommerce\nCVE ID : CVE-2026-15369\n \n Published : Aug. 29, 2026, 8:16 p.m. | 19\u00a0minutes ago\n \n Description : The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in ...", "creation_timestamp": "2026-08-29T20:39:44.928645Z"}, {"uuid": "0b0c658d-9ee3-4de0-8af5-aedcd71d3e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muav7cop6425", "content": "\ud83d\udea8 CVE-2026-15369 \u2014 CVSS 9.8 CRITICAL\n\nThe Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15369\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T22:07:13.944765Z"}, {"uuid": "c85449b8-8b0d-4a49-b986-7c2930e5b5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mub2fdghkh2t", "content": "CVE-2026-15369\nThe Custom User Registration Fields for WooCommerce plugin (versions up to 2.2.3) lets anyone who can place an order assign themselves any user role, including Administrator. This happens because the plugin\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T23:40:04.568870Z"}, {"uuid": "8177e628-0a3a-40a2-a485-f5d4341030b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-15369", "content": "", "creation_timestamp": "2026-08-30T00:15:04.041341Z"}, {"uuid": "13e69f75-1b62-4071-bd93-1fa0d6d0f919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mub5ujazp22i", "content": "One WooCommerce Plugin, One Admin Button, Infinite Corporate Regret\nPANIC 82% | Lag 0.0h | CVE-2026-15369 affects Custom User Registration Fields for WooCommerce up to 2.2.3. Anyone able to p\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-30T00:42:15.773066Z"}, {"uuid": "22416e67-6627-45a0-9bdf-25e3b649c87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mudkkxgngn2x", "content": "CVE-2026-15369 is trending. Hype score 4, currently #7 on cvemon.\n\nThe Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-15369", "creation_timestamp": "2026-08-30T23:34:52.975059Z"}, {"uuid": "f46d703d-d908-4d6d-aebd-3d1b900f0b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://t.me/captainsmok3r_official/515", "content": "CVE-2026-15369-\n Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout", "creation_timestamp": "2026-08-31T23:00:03.328341Z"}, {"uuid": "7de44a45-2ddc-4ef0-87d4-e2ec37490470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15369", "type": "seen", "source": "https://t.me/captainsmok3r_official/515", "content": "CVE-2026-15369-\n Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout", "creation_timestamp": "2026-09-01T00:00:08.347408Z"}]}