What is the official website of Millennium Al Aqeeq Hotel Madinah ?

The official website of Millennium Al Aqeeq Hotel Madinah is https://www.millenniumhotels.com/en/madinah/millennium-al-aqeeq-hotel/?cid=gplaces-millennium-al-aqeeq-hotel.

What is Millennium Al Aqeeq Hotel Madinah's cybersecurity risk score?

Millennium Al Aqeeq Hotel Madinah has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Millennium Al Aqeeq Hotel Madinah experienced?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Millennium Al Aqeeq Hotel Madinah been affected by any supply chain cyber incidents ?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Millennium Al Aqeeq Hotel Madinah have SOC 2 Type 1 certification ?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah is not certified under SOC 2 Type 1.

Does Millennium Al Aqeeq Hotel Madinah have SOC 2 Type 2 certification ?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah does not hold a SOC 2 Type 2 certification.

Does Millennium Al Aqeeq Hotel Madinah comply with GDPR ?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah is not listed as GDPR compliant.

Does Millennium Al Aqeeq Hotel Madinah have PCI DSS certification ?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah does not currently maintain PCI DSS compliance.

Does Millennium Al Aqeeq Hotel Madinah comply with HIPAA ?

According to Rankiteo, Millennium Al Aqeeq Hotel Madinah is not compliant with HIPAA regulations.

Does Millennium Al Aqeeq Hotel Madinah have ISO 27001 certification ?

According to Rankiteo,Millennium Al Aqeeq Hotel Madinah is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Millennium Al Aqeeq Hotel Madinah operate in ?

Millennium Al Aqeeq Hotel Madinah operates primarily in the Hospitality industry.

How many employees does Millennium Al Aqeeq Hotel Madinah have ?

Millennium Al Aqeeq Hotel Madinah employs approximately 13 people worldwide.

Does Millennium Al Aqeeq Hotel Madinah own any subsidiaries ?

Millennium Al Aqeeq Hotel Madinah presently has no subsidiaries across any sectors.

How many LinkedIn followers does Millennium Al Aqeeq Hotel Madinah have ?

Millennium Al Aqeeq Hotel Madinah's official LinkedIn profile has approximately 531 followers.

Does Millennium Al Aqeeq Hotel Madinah have a Crunchbase profile ?

No, Millennium Al Aqeeq Hotel Madinah does not have a profile on Crunchbase.

Does Millennium Al Aqeeq Hotel Madinah have a LinkedIn profile ?

Yes, Millennium Al Aqeeq Hotel Madinah maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/millenniumaqeeq.

How many cybersecurity incidents has Millennium Al Aqeeq Hotel Madinah experienced ?

As of August 30, 2026, Rankiteo reports that Millennium Al Aqeeq Hotel Madinah has not experienced any cybersecurity incidents.

How many peer or competitor companies does Millennium Al Aqeeq Hotel Madinah have ?

Millennium Al Aqeeq Hotel Madinah has an estimated 14,400 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

MAAHM

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

Millennium Al Aqeeq Hotel Madinah Vendor Cyber Rating & Cyber Score

millenniumhotels.com

Add Your Compliance Badge

Luxury Al Aqeeq Hotel ideally located near Haram Enjoy your stay at Millennium Madinah Al Aqeeq Hotel, a luxury Al Aqeeq hotel ideally located near Haram. Set on the second line of the holy Haram, Millennium Al Aqeeq Hotel is just a few minutes’ walk from the Prophet’s Mosque. With 505 guest rooms, a host of amenities and a classically elegant design, you will feel pampered during your stay at one of the best hotels in Madinah. Near our hotel in Medinah, you’ll find the city’s 4 historic mosques, the lively Old Bazaar, as well as the commercial, financial, and shopping hub. If you prefer not to leave the hotel, we have our own mini-market, restaurants and shops for your convenience. We also offer round-the-clock room service and

MAAHM A.I CyberSecurity Scoring

Scoring History

MAAHM

Millennium Al Aqeeq Hotel Madinah CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

MAAHM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MAAHM

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Millennium Al Aqeeq Hotel Madinah in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Millennium Al Aqeeq Hotel Madinah in 2026.

Incident Types MAAHM vs Hospitality Industry Avg (This Year)

No incidents recorded for Millennium Al Aqeeq Hotel Madinah in 2026.

Incident History - MAAHM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Millennium Al Aqeeq Hotel Madinah Subsidiaries

MAAHM

Hospitality

Website: https://www.millenniumhotels.com/en/madinah/millennium-al-aqeeq-hotel/?cid=gplaces-millennium-al-aqeeq-hotel

Company Size: 13

Millennium Hotels and ResortsHospitality

Millennium Airport Hotel DubaiHospitality

City Developments LimitedReal Estate

City Serviced Offices Pte LtdExecutive Offices

Millennium Downtown Abu DhabiHospitality

Grand Millennium DubaiHospitality

Grand Millennium Al WahdaHospitality

Millennium Plaza DohaHospitality

Bab Al Qasr Hotel - Abu DhabiHospitality

Studio M Arabian Plaza Hotel & Hotel ApartmentsHospitality

Grand Millennium Business BayHospitality

Millennium Al BarshaHospitality

Orchard Hotel SingaporeHospitality

New World Millennium Hong Kong HotelHospitality

Grand Millennium Tabuk HotelHospitality

Copthorne Hotel Dubai UAEHospitality

Millennium Hotel & Convention Centre KuwaitHospitality

Grand Millennium Gizan HotelHospitality

Grand Millennium Kuala LumpurHospitality

Millennium Resort SalalahHospitality

Grand Millennium MuscatHospitality

Millennium Hotel HailHospitality

Millennium Hotel DohaHospitality

Millennium Madinah Airport HotelHospitality

The Lowry HotelHospitality

The Lowry SpaHealth, Wellness & Fitness

M Hotel SingaporeHospitality

Millennium Central Kuwait Downtown HotelHospitality

M Hotel Al Dana Makkah By MillenniumHospitality

Grand Millennium Al Seef BasraHospitality

Grand Copthorne Waterfront HotelHospitality

Millennium Atria Business BayHospitality

Millennium Al Barsha Hotelالضيافة

Studio M Hotel Al BarshaHospitality

Copthorne King's Hotel SingaporeHospitality

Copthorne Hotel SharjahHospitality

The Biltmore Hotel TbilisiHospitality

M Social SingaporeHospitality

Grand Millennium AucklandHospitality

The Chelsea Harbour Hotel & SpaHospitality

Millennium Hotels and Resorts AsiaHospitality

Millennium Central DohaHospitality

Studio M Hotel - A Millennium & Copthorne HotelHospitality

Millennium Istanbul Golden HornHospitality

Grand Millennium Hotel SulaimaniHospitality

The Heritage Hotel Manila PhilippinesHospitality

Millennium Downtown New YorkHospitality

M Social PhuketHospitality

M Social Hotel Times Square New YorkHospitality

Millennium Taiba Hotel MadinahHospitality

M Social AucklandHospitality

Millennium Gloucester Hotel London KensingtonHospitality

Kingsgate Hotel Abu Dhabi by MillenniumHospitality

Copthorne Tara Hotel London KensingtonHospitality

GrandMillenniumKonyaLeisure, Travel & Tourism

Millennium Hotel London KnightsbridgeHospitality

Copthorne Hotel Cameron HighlandsHospitality

Millennium Hotel RotoruaHospitality

Millennium Resort HangzhouHospitality

Loading…

Millennium Al Aqeeq Hotel Madinah Similar Companies

Delaware North

cb DelawareNorth.com

Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotels and casinos. Building on more than a century of enduring partnerships and a commitment to local communities and sustainability, Delaware North’s vision is to delight guests by creating the world’s best experiences today while reimagining tomorrow.

Kerzner International

kerzner.com

Kerzner International has built a diverse collection of iconic brands and luxury properties, earning international acclaim for pioneering destination-defining hospitality, delivering unrivalled service, and curating transformative guest experiences. We are renowned for creating hospitality brands that are distinct and disruptive. Through Atlantis, One&Only, SIRO, and Rare Finds, our portfolio provides unforgettable and immersive experiences for guests in search of extraordinary moments. From authentic cultural exploration to innovative luxury concepts, every brand we build challenges convention to create unique journeys of discovery. We are a company that never settles. Because of this, we attract colleagues who share our desire to push until the next level is achieved, and then to keep going. We invest in our colleagues and our communities by working proactively to create jobs, training, education and opportunities that enrich lives. Our colleagues are at the heart of who we are and what we do. International resorts go hand in hand with an international team. In fact, we have more than 16,000 colleagues representing over 120 nationalities. And although we come from all over the world, we are united by the drive to create amazing experiences and everlasting memories for all.

Marriott International

marriott.com

Marriott International, Inc. is based in Bethesda, Maryland, USA, and encompasses a portfolio of approximately 9,000 properties across more than 30 leading brands in 141 countries and territories. Its heritage can be traced to a root beer stand opened in Washington, D.C., in 1927 by J. Willard and Alice S. Marriott. Marriott International is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. Marriott International does not discriminate on the basis of disability, veteran status or any other basis protected under federal, state or local laws. Community Guidelines: We reserve the right to remove without any notice content that we determine in our sole discretion is offensive or illegal, contains personally identifiable information, trademarks or copyrights belonging to a third party, advertises a third party’s products or services, or is otherwise inappropriate. Application Tips: We encourage job seekers to protect themselves from email and recruiting scams. Please note: 1) We do not accept applications via email or fax; 2) We never ask for money as part of the application process; 3) We only contact job applicants from approved email domains. Please find more information about Marriott International’s job application process and approved email address domains here: http://www.careers.marriott.com/tips-for-applying/

IHG Hotels & Resorts

ihgplc.com

IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 19 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 6,300 open hotels in more than 100 countries, and a development pipeline of over 2,000 properties. Luxury & Lifestyle: Six Senses Hotels Resorts Spas, Regent Hotels & Resorts, InterContinental Hotels & Resorts, Vignette Collection, Kimpton Hotels & Restaurants, Hotel Indigo Premium: voco hotels, HUALUXE Hotels & Resorts, Crowne Plaza Hotels & Resorts, EVEN Hotels Essentials: Holiday Inn Express, Holiday Inn Hotels & Resorts, Garner hotels, avid hotels Suites: Atwell Suites, Staybridge Suites, Holiday Inn Club Vacations, Candlewood Suites Exclusive Partners: Iberostar Beachfront Resorts InterContinental Hotels Group PLC is the Group's holding company and is incorporated and registered in England and Wales. Approximately 345,000 people work across IHG's hotels and corporate offices globally. Visit us online for more about our hotels and reservations and IHG One Rewards. To download the IHG One Rewards app, visit the Apple App or Google Play stores.

Holiday Inn Express

holidayinnexpress.com

An IHG hotel. IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. At Holiday Inn Express, we strive to make every interaction you have with us simple, smart and refreshingly engaging. With over 3,000 hotels in 75 different countries, Holiday Inn Express is IHG’s largest brand and one of the fastest growing hotel brands in the industry. Holiday Inn Express offers affordable hotels, high speed internet access, free breakfast and a comfortable room that will leave you relaxed and recharged. InterContinental Hotels Group PLC is the Group’s holding company and is incorporated in Great Britain and registered in England and Wales. Approximately 350,000 people work across IHG's hotels and corporate offices globally. Visit https://www.ihg.com/holidayinnexpress/hotels/us/en/reservation for hotel information and reservations and www.ihgrewards.com for more on IHG One Rewards. For our latest news, follow us on LinkedIn, Facebook, Instagram, TikTok and Twitter.

MGM Resorts International

cb mgmresorts.com

The resorts and casinos of MGM Resorts International™ are some of the most famous in the world. Our 28 destinations are renowned for their winning combination of quality entertainment, luxurious facilities, and exceptional customer service. We are actively expanding our presence globally, with potential developments in a number of domestic and international markets. At MGM Resorts International, we are all striving together to deliver an enticing blend of entertainment to every corner of the world. Many of our resorts are located in Las Vegas. Las Vegas features three of the largest convention centers in the U.S., spectacular entertainment, attractions, shopping, and world-famous resorts. Whether dancing fountains, incredible stage productions, casino action, museums or natural attractions such as Lake Mead, Vegas offers something for everyone. A stroll down our streets takes you around the globe, with recreations like climbing to the top of the Eiffel Tower or taking a Venetian gondola ride. From shimmering resort pools and spa rejuvenation to nonstop nightlife, Las Vegas promises an unforgettable career destination. With all of our unique and spectacular resorts and casinos, MGM Resorts International has a world of opportunities for you to discover excitement and rewards as you provide our guests with a wonderful and memorable experience. Take a closer look at our properties. We think you'll find an opportunity that's right for you. The 81,000 global employees of MGM Resorts are proud to be recognized as one of FORTUNE® Magazine’s World’s Most Admired Companies®.

DoubleTree by Hilton

cb doubletree.com

DoubleTree by Hilton hotels are distinctively designed properties that provide true comfort to today’s business and leisure travelers. From the millions of delighted hotel guests who are welcomed with the brand’s legendary, warm chocolate chip cookies at check-in to the advantages of the award-winning Hilton HHonors® guest reward program, each DoubleTree by Hilton guest receives a satisfying stay wherever their travels take them. With a growing collection of contemporary, upscale accommodations in more than 375+ gateway cities, metropolitan areas and vacation destinations worldwide. DoubleTree by Hilton is part of Hilton Worldwide (NYSE: HLT), a leading global hospitality company spanning the lodging sector from luxury and full-service hotels and resorts to extended-stay suites and focused-service hotels. For 95 years, Hilton Worldwide has been dedicated to continuing its tradition of providing exceptional guest experiences. The company’s portfolio of eleven world-class global brands is comprised of more than 4,100 managed, franchised, owned and leased hotels and timeshare properties, with more than 685,000 rooms in 92 countries and territories, including Hilton Hotels & Resorts, Waldorf Astoria Hotels & Resorts, Conrad Hotels & Resorts, Curio – A Collection by Hilton, DoubleTree by Hilton, Embassy Suites Hotels, Hilton Garden Inn, Hampton Hotels, Homewood Suites by Hilton, Home2 Suites by Hilton and Hilton Grand Vacations. The company also manages an award-winning customer loyalty program, Hilton Honors.

Wyndham Hotels & Resorts

wyndhamhotels.com

We are Wyndham Hotels & Resorts. We are the world’s largest hotel franchising company by the number of franchised properties, with approximately 8,300 hotels across approximately 100 countries on six continents. We operate a portfolio of 25 hotel brands: Whether choosing Wyndham Grand®, Dolce Hotels & Resorts by Wyndham®, Esplendor Boutique Hotels by Wyndham®, Dazzler by Wyndham®, Wyndham Hotels & Resorts®, TRYP by Wyndham®, Vienna House by Wyndham®, The Trademark Collection by Wyndham®, La Quinta® by Wyndham, Wingate by Wyndham®, Wyndham Garden®, Hawthorn Suites by Wyndham®, AmericInn by Wyndham®, Ramada by Wyndham®, Ramada Encore by Wyndham®, Baymont by Wyndham®, Microtel by Wyndham®, Days Inn by Wyndham®, Super 8 by Wyndham®, Howard Johnson by Wyndham®, Travelodge by Wyndham®, ECHO Suites Extended Stay by Wyndham® or WaterWalk by Wyndham®, our incomparable diversity of hotel brands deliver the experience the everyday traveler wants. Our Mission: We make hotel travel possible for all. Wherever people go, Wyndham will be there to welcome them. Our Values: The Wyndham values guide our behaviors in support of the company mission. They represent those deeply held principles that we believe to be right and true: Integrity, Accountability, Inclusivity, Caring, and Fun. Our Culture: Our ”Count on Me” and “Wyndham Welcome” philosophies put our values into action every day. Together, they epitomize our unique culture.

Jumeirah

jumeirah.com

Jumeirah, a global leader in luxury hospitality and a member of Dubai Holding, operates an exceptional portfolio of 31 properties, including 33 signature F&B restaurants, across the Middle East, Europe, Asia and Africa. In 1999, Jumeirah changed the face of luxury hospitality with the opening of the iconic Jumeirah Burj Al Arab and the brand is now renowned worldwide for its distinguished beachfront resorts, esteemed city hotels and luxury residences. From the contemporary Maldivian island paradise at Jumeirah Olhahali Island to the art-inspired Jumeirah Capri Palace in Italy and the modern twist on a British classic at Jumeirah Carlton Tower in London, the brand has become synonymous with warm and generous service and the ability to craft distinctive and purposeful experiences that bring joy to guests from across the world.

Loading…

NEWS

Millennium Al Aqeeq Hotel Madinah CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

August 07, 2025 07:00 AM

Millennium Hotels & Taiba elevate hospitality in Madinah with strategic relaunch of Al Aqeeq and Taiba Properties

Madinah, KSA – Millennium Hotels and Resorts Middle East & Africa, in partnership with Taiba, a Saudi forward hospitality company proudly...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-82424

SUMMARY

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82423

SUMMARY

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 5.4)

cvss2

Base Score: 5.5

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:P

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-82422

SUMMARY

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82421

SUMMARY

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15369

SUMMARY

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Store API /wc/store/v1/checkout request in the af_reg_checkout_data_to_order_meta_data_block() function, persisting it in order meta, and then passing it directly to WP_User::add_role() in the af_reg_custom_order_processing_function() function (hooked to woocommerce_thankyou) without validating against the plugin's admin-configured allowed role list. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by creating an account during checkout with a modified JSON body specifying administrator (or any other role slug) as the desired role. Note: The exploit requires the "User Role Selection" setting to be enabled.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…