{"schemaVersion":1,"id":"CVE-2026-85128","requestedId":"CVE-2026-85128","aliases":[],"status":"published","rawState":"Deferred","rawSeverityStatus":"Deferred","duplicateOf":null,"indexable":true,"title":null,"description":"The Choose User Role at Registration WordPress plugin before 1.3.3 does not validate the role requested at registration against the roles an administrator chose to offer, allowing unauthenticated users to request any role, including administrator, and to be granted it once the request is approved. Exploitation requires the Choose User Role at Registration WordPress plugin before 1.3.3's role selection feature and public account registration to both be enabled.","dates":{"published":"2026-09-17T06:00:09.483Z","modified":"2026-09-17T12:30:48.561Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"wordfence","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"cve.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"nvd","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00321,"percentile":0.23459,"severity":"low","asOf":"2026-10-14T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-09-17T00:00:00.000Z","score":0.00136,"percentile":0.03427},{"date":"2026-09-18T00:00:00.000Z","score":0.00186,"percentile":0.08527},{"date":"2026-09-19T00:00:00.000Z","score":0.00186,"percentile":0.08511},{"date":"2026-09-20T00:00:00.000Z","score":0.00186,"percentile":0.08502},{"date":"2026-09-21T00:00:00.000Z","score":0.00186,"percentile":0.08469},{"date":"2026-09-22T00:00:00.000Z","score":0.00186,"percentile":0.08486},{"date":"2026-09-23T00:00:00.000Z","score":0.00186,"percentile":0.08489},{"date":"2026-09-24T00:00:00.000Z","score":0.00321,"percentile":0.22402},{"date":"2026-09-25T00:00:00.000Z","score":0.00321,"percentile":0.22494},{"date":"2026-09-26T00:00:00.000Z","score":0.00321,"percentile":0.226},{"date":"2026-09-27T00:00:00.000Z","score":0.00321,"percentile":0.22618},{"date":"2026-09-28T00:00:00.000Z","score":0.00321,"percentile":0.22625},{"date":"2026-09-29T00:00:00.000Z","score":0.00321,"percentile":0.22652},{"date":"2026-09-30T00:00:00.000Z","score":0.00321,"percentile":0.22751},{"date":"2026-10-01T00:00:00.000Z","score":0.00321,"percentile":0.22781},{"date":"2026-10-02T00:00:00.000Z","score":0.00321,"percentile":0.2286},{"date":"2026-10-03T00:00:00.000Z","score":0.00321,"percentile":0.22893},{"date":"2026-10-04T00:00:00.000Z","score":0.00321,"percentile":0.2289},{"date":"2026-10-05T00:00:00.000Z","score":0.00321,"percentile":0.2291},{"date":"2026-10-06T00:00:00.000Z","score":0.00321,"percentile":0.23011},{"date":"2026-10-07T00:00:00.000Z","score":0.00321,"percentile":0.23094},{"date":"2026-10-08T00:00:00.000Z","score":0.00321,"percentile":0.23113},{"date":"2026-10-09T00:00:00.000Z","score":0.00321,"percentile":0.23149},{"date":"2026-10-10T00:00:00.000Z","score":0.00321,"percentile":0.23188},{"date":"2026-10-11T00:00:00.000Z","score":0.00321,"percentile":0.23212},{"date":"2026-10-12T00:00:00.000Z","score":0.00321,"percentile":0.23236},{"date":"2026-10-13T00:00:00.000Z","score":0.00321,"percentile":0.23325},{"date":"2026-10-14T00:00:00.000Z","score":0.00321,"percentile":0.23459}],"last30":[{"date":"2026-09-17T00:00:00.000Z","score":0.00136,"percentile":0.03427},{"date":"2026-09-18T00:00:00.000Z","score":0.00186,"percentile":0.08527},{"date":"2026-09-19T00:00:00.000Z","score":0.00186,"percentile":0.08511},{"date":"2026-09-20T00:00:00.000Z","score":0.00186,"percentile":0.08502},{"date":"2026-09-21T00:00:00.000Z","score":0.00186,"percentile":0.08469},{"date":"2026-09-22T00:00:00.000Z","score":0.00186,"percentile":0.08486},{"date":"2026-09-23T00:00:00.000Z","score":0.00186,"percentile":0.08489},{"date":"2026-09-24T00:00:00.000Z","score":0.00321,"percentile":0.22402},{"date":"2026-09-25T00:00:00.000Z","score":0.00321,"percentile":0.22494},{"date":"2026-09-26T00:00:00.000Z","score":0.00321,"percentile":0.226},{"date":"2026-09-27T00:00:00.000Z","score":0.00321,"percentile":0.22618},{"date":"2026-09-28T00:00:00.000Z","score":0.00321,"percentile":0.22625},{"date":"2026-09-29T00:00:00.000Z","score":0.00321,"percentile":0.22652},{"date":"2026-09-30T00:00:00.000Z","score":0.00321,"percentile":0.22751},{"date":"2026-10-01T00:00:00.000Z","score":0.00321,"percentile":0.22781},{"date":"2026-10-02T00:00:00.000Z","score":0.00321,"percentile":0.2286},{"date":"2026-10-03T00:00:00.000Z","score":0.00321,"percentile":0.22893},{"date":"2026-10-04T00:00:00.000Z","score":0.00321,"percentile":0.2289},{"date":"2026-10-05T00:00:00.000Z","score":0.00321,"percentile":0.2291},{"date":"2026-10-06T00:00:00.000Z","score":0.00321,"percentile":0.23011},{"date":"2026-10-07T00:00:00.000Z","score":0.00321,"percentile":0.23094},{"date":"2026-10-08T00:00:00.000Z","score":0.00321,"percentile":0.23113},{"date":"2026-10-09T00:00:00.000Z","score":0.00321,"percentile":0.23149},{"date":"2026-10-10T00:00:00.000Z","score":0.00321,"percentile":0.23188},{"date":"2026-10-11T00:00:00.000Z","score":0.00321,"percentile":0.23212},{"date":"2026-10-12T00:00:00.000Z","score":0.00321,"percentile":0.23236},{"date":"2026-10-13T00:00:00.000Z","score":0.00321,"percentile":0.23325},{"date":"2026-10-14T00:00:00.000Z","score":0.00321,"percentile":0.23459}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","evidence":[]},"exploits":[{"id":"REF_545F52B91B57A02C","name":"Exploit Reference (wpscan.com)","source":"reference","url":"https://wpscan.com/vulnerability/e48789a3-49b4-4fa4-8243-c242b79b9d9d/","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"exploitSources":["reference"],"weaknesses":[{"id":"CWE-269","name":"Improper Privilege Management","description":"The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/269.html","capec":[{"id":"CAPEC-122","name":"Privilege Abuse","url":"https://capec.mitre.org/data/definitions/122.html"},{"id":"CAPEC-233","name":"Privilege Escalation","url":"https://capec.mitre.org/data/definitions/233.html"},{"id":"CAPEC-58","name":"Restful Privilege Elevation","url":"https://capec.mitre.org/data/definitions/58.html"}],"techniques":[{"id":"T1548","name":"Abuse Elevation Control Mechanism","url":"https://attack.mitre.org/techniques/T1548/","tactics":[{"id":"TA0111","name":"Privilege Escalation"}]}],"countermeasures":[{"id":"D3-AA","name":"Agent Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-AA/"},{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-AL","name":"Account Locking","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-AL/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-CDP","name":"Change Default Password","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CDP/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-DI","name":"Data Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-DI/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RD","name":"Restore Database","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RD/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RUAA","name":"Restore User Account Access","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RUAA/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SCP","name":"System Configuration Permissions","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SCP/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-UAP","name":"User Account Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-UAP/"},{"id":"D3-ULA","name":"Unlock Account","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-ULA/"}]}],"ttp":{"capecs":[{"id":"CAPEC-122","name":"Privilege Abuse","url":"https://capec.mitre.org/data/definitions/122.html","weaknessIds":["CWE-269"],"techniqueIds":["T1548"]},{"id":"CAPEC-233","name":"Privilege Escalation","url":"https://capec.mitre.org/data/definitions/233.html","weaknessIds":["CWE-269"],"techniqueIds":["T1548"]},{"id":"CAPEC-58","name":"Restful Privilege Elevation","url":"https://capec.mitre.org/data/definitions/58.html","weaknessIds":["CWE-269"],"techniqueIds":[]}],"techniques":[{"id":"T1548","name":"Abuse Elevation Control Mechanism","url":"https://attack.mitre.org/techniques/T1548/","weaknessIds":["CWE-269"],"capecIds":["CAPEC-122","CAPEC-233"],"tactics":[{"id":"TA0111","name":"Privilege Escalation"}],"countermeasures":[{"id":"D3-AA","name":"Agent Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-AA/"},{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-AL","name":"Account Locking","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-AL/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-CDP","name":"Change Default Password","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CDP/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-DI","name":"Data Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-DI/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RD","name":"Restore Database","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RD/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RUAA","name":"Restore User Account Access","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RUAA/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SCP","name":"System Configuration Permissions","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SCP/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-UAP","name":"User Account Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-UAP/"},{"id":"D3-ULA","name":"Unlock Account","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-ULA/"}]}],"countermeasures":[{"id":"D3-AA","name":"Agent Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-AA/"},{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-AL","name":"Account Locking","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-AL/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-CDP","name":"Change Default Password","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CDP/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-DI","name":"Data Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-DI/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RD","name":"Restore Database","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RD/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RUAA","name":"Restore User Account Access","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RUAA/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SCP","name":"System Configuration Permissions","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SCP/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-UAP","name":"User Account Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-UAP/"},{"id":"D3-ULA","name":"Unlock Account","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-ULA/"}],"countermeasuresByTactic":[{"tactic":"Harden","items":[{"id":"D3-AA","name":"Agent Authentication","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-AA/"},{"id":"D3-CDP","name":"Change Default Password","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-CDP/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-SCP","name":"System Configuration Permissions","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SCP/"}]},{"tactic":"Detect","items":[{"id":"D3-AEM","name":"Application Exception Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-AEM/"},{"id":"D3-DA","name":"Dynamic Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-DA/"},{"id":"D3-EFA","name":"Emulated File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-EFA/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-OPM","name":"Operational Process Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-OPM/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-SCA","name":"System Call Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SCA/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"}]},{"tactic":"Isolate","items":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-EAL","name":"Executable Allowlisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EAL/"},{"id":"D3-EDL","name":"Executable Denylisting","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-EDL/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-UAP","name":"User Account Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-UAP/"}]},{"tactic":"Evict","items":[{"id":"D3-AL","name":"Account Locking","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-AL/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"}]},{"tactic":"Restore","items":[{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RD","name":"Restore Database","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RD/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RUAA","name":"Restore User Account Access","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RUAA/"},{"id":"D3-ULA","name":"Unlock Account","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-ULA/"}]},{"tactic":"Deceive","items":[{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"}]},{"tactic":"Model","items":[{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-DI","name":"Data Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-DI/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"}]}]},"affected":[{"vendor":"unknown","product":"choose user role at registration","name":"Choose User Role at Registration","label":"choose user role at registration","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"source":null,"versions":[{"text":"< 1.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.3","eol":null},{"vendor":"wordpress","product":"choose-user-role-at-registration","name":"Choose User Role at Registration for WooCommerce","label":"choose-user-role-at-registration","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"source":null,"versions":[{"text":"≤ 1.3.2 (fixed in 1.3.3)","noFixRecorded":false,"fixedIn":"1.3.3"}],"versionsText":"≤ 1.3.2 (fixed in 1.3.3)","eol":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://wpscan.com/vulnerability/e48789a3-49b4-4fa4-8243-c242b79b9d9d/","label":"wpscan.com/vulnerability/e48789a3-49b4-4fa4-8243-c242b79b9d9d/","hostname":"wpscan.com","tags":["Exploit","VDB Entry","Technical Description"],"sources":["cve.org","nvd"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d48aba0f-4655-4836-bc6c-c9c74339f758","label":"www.wordfence.com/threat-intel/vulnerabilities/id/d48aba0f-4655-4836-bc6c-c9c74339f758","hostname":"www.wordfence.com","tags":["Vendor Advisory"],"sources":["wordfence"]}],"droppedReferenceCount":0,"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-17T06:00:09.483Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-17T12:30:48.561Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"default","profileName":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10},"appliedRules":["high-cvss-alone"]},"warnings":[],"meta":{"dataAsOf":"2026-10-14T22:40:54.646Z","stale":false,"partial":false}}