{"items":[{"id":"CVE-2026-18143","published":"2026-09-26T06:39:44.226Z","updated":"2026-09-26T22:51:17.345Z","title":"Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler","severity":"CRITICAL","score":9.8,"vendor":"Addify","product":"Request a Quote for WooCommerce","kev":false,"epss":0.0214,"kevAdded":null,"exploit":false},{"id":"CVE-2026-15369","published":"2026-08-29T19:26:34.288Z","updated":"2026-09-01T02:15:41.417Z","title":"Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout","severity":"CRITICAL","score":9.8,"vendor":"Addify","product":"Custom User Registration Fields for WooCommerce","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-49779","published":"2026-07-02T11:15:03.479Z","updated":"2026-07-28T14:20:33.630Z","title":"WordPress Tax Exempt for WooCommerce plugin < 1.9.5 - Path Traversal vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Addify","product":"Tax Exempt for WooCommerce","kev":false,"epss":0.00443,"kevAdded":null,"exploit":false},{"id":"CVE-2025-60207","published":"2025-11-06T15:55:06.274Z","updated":"2026-04-28T18:40:38.756Z","title":"WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability","severity":"CRITICAL","score":10,"vendor":"Addify","product":"Custom User Registration Fields for WooCommerce","kev":false,"epss":0.00456,"kevAdded":null,"exploit":false}]}