Checkout Field Editor for WooCommerce (Pro) vulnerabilities

2 known vulnerabilities in Checkout Field Editor for WooCommerce (Pro) from ThemeHigh. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Checkout Field Editor for WooCommerce (Pro): Missing Authorization

  CVE-2026-122041Nov 7, 2026ThemeHigh

  The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in the ajax_remove_uploaded() function in versions up to, and including, 3.8.0. The

• 9.1 Critical severity

  Checkout Field Editor for WooCommerce (Pro): Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-35658Jun 10, 2024ThemeHigh

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro):