SysBasics Customize My Account for WooCommerce

Information

Software Type	Plugin
Software Slug	customize-my-account-for-woocommerce (view on wordpress.org)
Software Status	Active
Software Author	phppoet
Software Website	sysbasics.com
Software Downloads	677,265
Software Active Installs	8,000
Software Record Last Updated	August 19, 2026

7 Vulnerabilities

Submit a Vulnerability

SysBasics Customize My Account for WooCommerce <= 4.4.14 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'row_type' Parameter

4.4

CVE-2026-15324

Jul 15, 2026

Researcher: Wordfence PRISM

SysBasics Customize My Account for WooCommerce – Live My Account Customizer <= 4.3.9 - Reflected Cross-Site Scripting

6.1

CVE-2026-57358

Jul 1, 2026

Researcher: dutafi

SysBasics Customize My Account for WooCommerce <= 4.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

6.4

CVE-2026-12136

Jun 17, 2026

Researchers: Chloe Chamberland, Wordfence PRISM

SysBasics Customize My Account for WooCommerce <= 4.3.6 - Reflected Cross-Site Scripting via 'tab' Parameter

6.1

CVE-2026-12137

Jun 17, 2026

Researchers: Chloe Chamberland, Wordfence PRISM

SysBasics Customize My Account for WooCommerce <= 2.8.22 - Reflected Cross-Site Scripting

6.1

CVE-2025-24592

Dec 21, 2024

Researcher: Le Ngoc Anh

SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter

6.1

CVE-2024-10837

Nov 9, 2024

Researcher: vgo0

Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs

4.3

CVE-2023-51369

Dec 26, 2023

Researcher: thiennv

Title	Status	CVE ID	CVSS	Researchers	Date
SysBasics Customize My Account for WooCommerce <= 4.4.14 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'row_type' Parameter	Patched	CVE-2026-15324	4.4	Wordfence PRISM	July 15, 2026
SysBasics Customize My Account for WooCommerce – Live My Account Customizer <= 4.3.9 - Reflected Cross-Site Scripting	Patched	CVE-2026-57358	6.1	dutafi	July 1, 2026
SysBasics Customize My Account for WooCommerce <= 4.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes	Patched	CVE-2026-12136	6.4	Chloe Chamberland, Wordfence PRISM	June 17, 2026
SysBasics Customize My Account for WooCommerce <= 4.3.6 - Reflected Cross-Site Scripting via 'tab' Parameter	Patched	CVE-2026-12137	6.1	Chloe Chamberland, Wordfence PRISM	June 17, 2026
SysBasics Customize My Account for WooCommerce <= 2.8.22 - Reflected Cross-Site Scripting	Patched	CVE-2025-24592	6.1	Le Ngoc Anh	December 21, 2024
SysBasics Customize My Account for WooCommerce <= 2.7.29 - Reflected Cross-Site Scripting via tab Parameter	Patched	CVE-2024-10837	6.1	vgo0	November 9, 2024
Customize My Account for WooCommerce <= 1.8.3 - Cross-Site Request Forgery via restore_my_account_tabs	Patched	CVE-2023-51369	4.3	thiennv	December 26, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation