Checkout Files Upload for WooCommerce vulnerabilities
We track 1 vulnerability in Checkout Files Upload for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Checkout Files Upload for WooCommerce vulnerabilities
- 9.8 Critical severity
Checkout Files Upload for WooCommerce: Unrestricted Upload of File with Dangerous Type
The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitr