woocommerce-checkout-field-editor-pro
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action | woocommerce-checkout-field-editor-pro | WordPress | Critical | Fix reported | |
| Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter | woocommerce-checkout-field-editor-pro | WordPress | Medium | Fix reported | |
| Checkout Field Editor for WooCommerce (Pro) <= 3.6.2 - Unauthenticated Arbitrary File Deletion | woocommerce-checkout-field-editor-pro | WordPress | Critical | Fix reported |