10.0
Critical
CVE-2025-60207 Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for WooCommerce: from n/a through <= 2.1.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Custom User Registration Fields for WooCommerce 2.1 | earliest → 2.1.2 | No fix stated |