Advisories · Technology
quadlayers Checkout Field Manager (Checkout Manager) for WooCommerce.
Every CVE that names quadlayers Checkout Field Manager (Checkout Manager) for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID
- quadlayers Checkout Field Manager (Checkout Manager) for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
- quadlayers Checkout Field Manager (Checkout Manager) for WooCommerce
- Broken access control
- CVSS 5.3 Medium
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload
- quadlayers Checkout Field Manager (Checkout Manager) for WooCommerce
- Unrestricted file upload