Advisories · Technology
Themehigh Checkout Field Editor for WooCommerce (Pro).
Every CVE that names Themehigh Checkout Field Editor for WooCommerce (Pro) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action
- Themehigh Checkout Field Editor for WooCommerce (Pro)
- Broken access control
- CVSS 6.5 Medium
Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter
- Themehigh Checkout Field Editor for WooCommerce (Pro)
- Path traversal
- CVSS 8.6 High
WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability
- ThemeHigh Checkout Field Editor for WooCommerce (Pro)
- Path traversal