What is the official website of Providence | PS&D Provider Recruitment ?

The official website of Providence | PS&D Provider Recruitment is https://psdrecruit.org/providence-health-services/.

What is Providence | PS&D Provider Recruitment's cybersecurity risk score?

Providence | PS&D Provider Recruitment has an AI-generated cybersecurity risk score of 778 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Providence | PS&D Provider Recruitment experienced?

According to Rankiteo, Providence | PS&D Provider Recruitment currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Providence | PS&D Provider Recruitment been affected by any supply chain cyber incidents ?

According to Rankiteo, Providence | PS&D Provider Recruitment has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Providence | PS&D Provider Recruitment have SOC 2 Type 1 certification ?

According to Rankiteo, Providence | PS&D Provider Recruitment is not certified under SOC 2 Type 1.

Does Providence | PS&D Provider Recruitment have SOC 2 Type 2 certification ?

According to Rankiteo, Providence | PS&D Provider Recruitment does not hold a SOC 2 Type 2 certification.

Does Providence | PS&D Provider Recruitment comply with GDPR ?

According to Rankiteo, Providence | PS&D Provider Recruitment is not listed as GDPR compliant.

Does Providence | PS&D Provider Recruitment have PCI DSS certification ?

According to Rankiteo, Providence | PS&D Provider Recruitment does not currently maintain PCI DSS compliance.

Does Providence | PS&D Provider Recruitment comply with HIPAA ?

According to Rankiteo, Providence | PS&D Provider Recruitment is not compliant with HIPAA regulations.

Does Providence | PS&D Provider Recruitment have ISO 27001 certification ?

According to Rankiteo,Providence | PS&D Provider Recruitment is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Providence | PS&D Provider Recruitment operate in ?

Providence | PS&D Provider Recruitment operates primarily in the Hospitals and Health Care industry.

How many employees does Providence | PS&D Provider Recruitment have ?

Providence | PS&D Provider Recruitment employs approximately None employees people worldwide.

Does Providence | PS&D Provider Recruitment own any subsidiaries ?

Providence | PS&D Provider Recruitment presently has no subsidiaries across any sectors.

How many LinkedIn followers does Providence | PS&D Provider Recruitment have ?

Providence | PS&D Provider Recruitment's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Providence | PS&D Provider Recruitment ?

Providence | PS&D Provider Recruitment is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Providence | PS&D Provider Recruitment have a Crunchbase profile ?

No, Providence | PS&D Provider Recruitment does not have a profile on Crunchbase.

Does Providence | PS&D Provider Recruitment have a LinkedIn profile ?

Yes, Providence | PS&D Provider Recruitment maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/providence-provider-careers.

How many cybersecurity incidents has Providence | PS&D Provider Recruitment experienced ?

As of August 30, 2026, Rankiteo reports that Providence | PS&D Provider Recruitment has experienced 8 cybersecurity incidents.

How many peer or competitor companies does Providence | PS&D Provider Recruitment have ?

Providence | PS&D Provider Recruitment has an estimated 33,752 peer or competitor companies worldwide.

What types of cybersecurity incidents has Providence | PS&D Provider Recruitment faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PPPR

Boost Score +25 with badge (5 left)

778

/1000

Fair

803

/1000

Good

Providence | PS&D Provider Recruitment Vendor Cyber Rating & Cyber Score

psdrecruit.org

Add Your Compliance Badge

Provider Solutions & Development is Providence’s exclusive recruiting partner for physician and advanced practice clinician roles. Providence is a nationally recognized, comprehensive health care organization spanning seven states with a universal mission – to provide compassionate care to all who need its services, especially the poor and vulnerable. Within this system, there are hundreds of amazing opportunities available, and we can’t wait to talk to you about them. Providence is proud to be an Equal Employment Opportunity organization.

PPPR A.I CyberSecurity Scoring

Scoring History

PPPR

Providence | PS&D Provider Recruitment CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Providence Health &...

Breach

1/2026

PRO1774550304

Covenant Health

Ransomware

100

5/2025

COV1767361247

Providence Health &...

Breach

8/2024

PRO1775673374

Providence | PS&D P...

Ransomware

100

10/2023

PRO8315124

Providence | PS&D P...

Ransomware

10/2023

PRO8295124

Providence | PS&D P...

Breach

02/2016

STJ2513522

Providence | PS&D P...

Breach

11/2014

PRO029090625

Providence | PS&D P...

Breach

6/2014

ST-924080425

Loading…

A.I.

PPPR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PPPR

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Providence | PS&D Provider Recruitment in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Providence | PS&D Provider Recruitment in 2026.

Incident Types PPPR vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Providence | PS&D Provider Recruitment in 2026.

Incident History - PPPR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Providence | PS&D Provider Recruitment Subsidiaries

PPPR

Hospitals and Health Care

Website: https://psdrecruit.org/providence-health-services/

Company Size: 10,001+ employees

ProvidenceHospitals and Health Care

Providence Health & ServicesHospitals and Health Care

Providence Institute for Human CaringHospitals and Health Care

Providence Foundations of OregonNon-profit Organizations

Providence FoundationsNon-profit Organizations

SwedishHospitals and Health Care

Providence IndiaHospitals and Health Care

St. Joseph HealthHospitals and Health Care

Providence St. Joseph HospitalHospitals and Health Care

Mission HospitalHospitals and Health Care

Covenant HealthHospitals and Health Care

Providence 4SITEHospitals and Health Care

Providence CareersHospitals and Health Care

Providence 4SITEHospitals and Health Care

Pacific Medical CentersHospitals and Health Care

Providence AlaskaHospitals and Health Care

Saint John's Cancer Institute (formerly John Wayne Cancer Institute) at ProvidenceHospitals and Health Care

Providence Mission Leadership InstituteProfessional Training and Coaching

KadlecHospitals and Health Care

Providence Saint John's Health CenterHospitals and Health Care

St. Jude Medical CenterMedical Practices

Providence Holy Cross Medical CenterHospitals and Health Care

Providence SwedishHospitals and Health Care

Providence Nursing InstituteHospitals and Health Care

Providence Little Company of Mary Medical CentersHospitals and Health Care

Providence Saint Joseph Medical Center Hospitals and Health Care

Provider Solutions & DevelopmentHospitals and Health Care

Pacific Medical Centers | PS&D Provider RecruitmentHospitals and Health Care

Kadlec | PS&D Provider RecruitmentHospitals and Health Care

Swedish | PS&D Provider RecruitmentHospitals and Health Care

Loading…

Providence | PS&D Provider Recruitment Similar Companies

Brookdale

cb brookdale.com

Relationships are the heart of our culture. They help us create a sense of family among our residents, associates and patients. Integrity is our soul. It guides us to be open in our communication with each other, and it enables us to make the right decisions for the people who have entrusted us with their care. Our relationships and our integrity work together to create a positive impact in the lives of the people we touch. The happiness of those we serve is dependent on the happiness of our associates, so you’ll receive competitive compensation and a benefits package with additional perks designed to make you smile. The work you do will be challenging yet rewarding. But you’ll earn more than a paycheck; you can enjoy opportunities to grow your career, as well as ongoing programs catered to your health, financial, mental, and emotional needs. Most of all, we believe you can find purpose, meaning, and the chance to be a part of something bigger than yourself. If you want to work in an environment where you can become the best you that’s possible, join us! www.brookdalecareers.com.

Rush University Medical Center

rush.edu

Rush University Medical Center is an academic medical center that includes a 671-bed hospital serving adults and children, the 61-bed Johnston R. Bowman Health Center and Rush University. Rush University is home to one of the first medical colleges in the Midwest and one of the nation's top-ranked nursing colleges, as well as graduate programs in allied health, health systems management and biomedical research. The medical center also offers more than 70 highly selective residency and fellowship programs in medical and surgical specialties and subspecialties. For more than 170 years, Rush has been leading the way in developing innovative and often life-saving treatments. Today, Rush is a thriving center for basic and clinical research, with physicians and scientists involved in hundreds of research projects developing and testing the effectiveness and safety of new therapies and medical devices. In addition to its mission in patient care, education and research, Rush maintains a strong commitment to the community. Rush reaches out to the Chicago community through such offerings as the Rush Community Services Initiatives Program, an umbrella for several student-led outreach programs designed to address the social and health care needs of residents in neighboring communities.

Beth Israel Lahey Health

bilh.org

Beth Israel Lahey Health is a new, integrated system providing patients with better care wherever they are. Care informed by world-class research and education. We are doctors and nurses, technicians and social workers, innovators and educators, and so many others. All with a shared vision for what health care can and should be.

Boston Medical Center (BMC)

bmc.org

Boston Medical Center (BMC) is a 511-bed, equity-led academic medical center and a proud member of the Boston Medical Center Health System. BMC delivers a model of healthcare where innovative and equitable care empowers all patients to thrive. As a premier academic medical center in Boston, a national leader in clinical care, and the largest essential hospital in New England, BMC’s world-class clinicians provide comprehensive care in more than 70 specialties and subspecialties. BMC understands that health equity is foundational to community wellbeing, and it requires transformative thinking, rewriting policies that have historically underserved communities, creating access to cutting-edge care for all, and co-creating programs with community partners that serve as national models for improving patient outcomes and experiences. We are invested in going above and beyond what is traditionally considered medicine to meet the needs of our communities and address disparities in clinical care and beyond. By pioneering cutting-edge research and advancing scientific discovery, we are fostering a culture of innovation where novel treatments and therapies are not only effective but also accessible. Boston Medical Center Health System is an integrated academic healthcare system that models a new kind of excellence in healthcare where clinical and operational innovation meets health equity and access. With more than 15,000 dedicated employees, BMC Health System is committed to advancing scientific discovery and access to care, partnering with our communities, and developing scalable approaches to restore and maintain health. Visit jobs.bmc.org for career opportunities.

Massachusetts General Hospital

cb massgeneral.org

Guided by the needs of our patients and their families, Massachusetts General Hospital aims to deliver the very best health care in a safe, compassionate environment; to advance that care through innovative research and education; and, to improve the health and well-being of the diverse communities we serve. Visit our careers page! http://www.mghcareers.org

Abbott

cb abbott.com

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritional and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries. Connect with us at www.abbott.com, on Facebook at www.facebook.com/Abbott and www.facebook.com/AbbottCareers, on Instagram @AbbottGlobal, and on X @AbbottNews. We invite you to explore opportunities at Abbott, to see if your talents and career aspirations may fit with our openings. An equal opportunity employer, Abbott welcomes and encourages diversity in our workforce. Terms of Use: https://www.abbott.com/social-media-terms-of-use.html Privacy Policy: https://abbo.tt/privacy

UT Southwestern Medical Center

utsouthwestern.edu

UT Southwestern is an academic medical center, world-renowned for its research, regarded among the best in the country for medical education and for clinical and scientific training, and nationally recognized for the quality of care its faculty provides to patients at UT Southwestern’s University Hospital & Clinics and affiliated institutions. The Medical Center includes three degree-granting institutions: UT Southwestern Medical School, UT Southwestern Graduate School of Biomedical Sciences, and UT Southwestern School of Health Professions. - The schools train nearly 3,700 medical, graduate, and health profession students, residents, and postdoctoral fellows each year. - Ongoing support from federal agencies, along with foundations, individuals, and corporations, provides more than $524 million per year to fund faculty research. - UT Southwestern physicians provide care in about 80 specialties to more than 117,000 hospitalized patients, more than 360,000 emergency room cases, and oversee nearly 3 million outpatient visits a year. - UT Southwestern has approximately 25,000 employees and an operating budget of $3.7 billion. - UT Southwestern is the #1 hospital in Dallas-Fort Worth for the ninth year in a row, according to U.S. News & World Report. In addition, 12 of our specialties are nationally ranked for 2025-2026 – the most of any hospital in Texas. Those specialties include: Cancer; Cardiology, Heart & Vascular Surgery; Diabetes & Endocrinology; Gastroenterology & GI Surgery; Geriatrics; Neurology & Neurosurgery; Obstetrics & Gynecology; Orthopedics; Otolaryngology – Ear, Nose & Throat; Pulmonology & Lung Surgery; Rehabilitation; and Urology.

Nationwide Children's Hospital

nationwidechildrens.org

Nationwide Children’s is one of America's largest pediatric hospitals, an international leader in research and is ranked in all 10 specialties on U.S. News & World Report’s 2025-26 “America’s Best Children’s Hospitals” list. Our staff, comprised of 1,600 medical professionals and over 16,000 employees, provides state-of-the-art pediatric care for 1.8 million patient visits annually. And, according to the Children’s Hospital Association, Nationwide Children's is the #1 provider of pediatric surgery in the country. Our doctors represent every major pediatric sub-specialty. With over 50 locations throughout Ohio, signature programs include heart, cancer, gastroenterology and neonatology care, all of which are internationally recognized. Tim Robinson is CEO of Nationwide Children’s Hospital, which includes the Abigail Wexner Research Institute at Nationwide Children’s Hospital, Nationwide Children’s Hospital Foundation and The Center for Family Safety and Healing at Nationwide Children’s Hospital. As home to the Department of Pediatrics of The Ohio State University College of Medicine, Nationwide Children’s physicians train the next generation of pediatricians and pediatric specialists. The Abigail Wexner Research Institute at Nationwide Children’s Hospital is one of the Top 10 National Institutes of Health-funded freestanding pediatric research facilities. Nationwide Children’s remains true to the original mission since its founding in 1892 of providing care regardless of a family’s ability to pay. More information is available at NationwideChildrens.org.

OSF HealthCare

osfhealthcare.org

OSF HealthCare is an integrated health system founded by The Sisters of the Third Order of St. Francis and headquartered in Peoria, Illinois. The system includes 18 inpatient facilities encompassing 16 licensed hospitals, two of which operate dual campuses in separate communities. Among these hospitals, 10 are acute care facilities, five are critical access hospitals and one is a continuing care facility. OSF has 2,141 licensed beds throughout Illinois and Michigan. OSF employs more than 27,000 Mission Partners across 170+ locations. These include OSF HealthCare Children’s Hospital of Illinois, the third largest pediatric hospital in the state, and OSF OnCall, its digital health operating entity that offers hospital-at-home care. In addition, OSF operates two colleges of nursing; OSF Home Care Services, an extensive network of home health and hospice services; Pointcore, Inc., which is composed of health care-related businesses; and OSF HealthCare Foundation, the philanthropic arm of the organization. Advances in health care transformation take place through OSF Innovation as well as OSF Ventures, which provides investment capital for promising health care innovation startups. OSF HealthCare has been recognized by Fortune as one of the most innovative companies in the country. That same commitment to innovation extends to how OSF supports and invests in its Mission Partners. OSF consistently earns recognition for showing dedication to Mission Partner well-being: •America’s Best-in-State Employers | Forbes Magazine | 2018-2026 •150 Top Places to Work in Healthcare | Becker’s Healthcare | 2019, 2022-2025 •Best Employers for Women | Forbes Magazine | 2020 OSF HealthCare is an Equal Opportunity Employer (EOE). By engaging with this page, you acknowledge and agree to follow our social media terms of use, which you can find here: https://www.osfhealthcare.org/patients-visitors/terms-conditions/social-terms

Loading…

NEWS

Providence | PS&D Provider Recruitment CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 08, 2026 05:54 AM

Portland Timbers vs. Vancouver Whitecaps: March 7, 2026

Portland Timbers vs. Vancouver Whitecaps. Vancouver Whitecaps players celebrate a goal by Brian White in the 21st minute during an MLS match...

Read Article

March 08, 2026 05:04 AM

Carmine "Larry" Labbadia Obituary

Carmine "Larry" Labbadia passed away peacefully on March 5, 2026, surrounded by his loving family. Carmine was born on July 12, 1929 in Providence,...

Read Article

March 08, 2026 05:04 AM

Edward J. Purcell, Jr. Obituary

July 12, 1946 – March 2, 2026 Edward J. Purcell, Jr., of Moorpark, California, passed away on March 2, 2026. Born in Providence, Rhode Island, he...

Read Article

March 08, 2026 05:00 AM

Georgetown blows lead, rallies to edge Providence

Senior center Vince Iwuchukwu scored a career-high 25 points and pulled down 10 rebounds as Georgetown rallied late to snap a seven-game...

Read Article

March 08, 2026 04:51 AM

Providence Boys Basketball are 2A State Champions

The Stallions become the first boys team from Jacksonville to win a State Title in a decade. Author: firstcoastnews.com.

Read Article

March 08, 2026 04:47 AM

Iwuchukwu scores 25 as Georgetown beats Providence 80-79

Vincent Iwuchukwu scored 25 points off of the bench to help lead the Georgetown Hoyas past the Providence Friars 80-79 on Saturday.

Read Article

March 08, 2026 04:31 AM

Hoyas Hold on for 80-79 Win Over Providence, Completing Season Sweep

WASHINGTON – Fueled by five in double figures, the Georgetown University men's basketball team held on for the 80-79 win over the Providence...

Read Article

March 08, 2026 04:06 AM

Providence Friars vs. Butler Bulldogs - Boxscore - Live Score - March 11, 2026

View the Providence Friars vs. Butler Bulldogs basketball game played on March 11, 2026. View box score, stats, odds, highlights,...

Read Article

March 08, 2026 03:57 AM

Finally! Providence boys end area’s basketball title drought with 2A crown

Providence ended the area's lengthy championship drought in boys basketball with a 51-43 win over Miami Country Day in front of the hometown...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-82424

SUMMARY

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82423

SUMMARY

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 5.4)

cvss2

Base Score: 5.5

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:P

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-82422

SUMMARY

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82421

SUMMARY

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15369

SUMMARY

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Store API /wc/store/v1/checkout request in the af_reg_checkout_data_to_order_meta_data_block() function, persisting it in order meta, and then passing it directly to WP_User::add_role() in the af_reg_custom_order_processing_function() function (hooked to woocommerce_thankyou) without validating against the plugin's admin-configured allowed role list. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by creating an account during checkout with a modified JSON body specifying administrator (or any other role slug) as the desired role. Note: The exploit requires the "User Role Selection" setting to be enabled.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…