# themelocation Custom WooCommerce Checkout Fields Editor.

Every CVE that names themelocation Custom WooCommerce Checkout Fields Editor among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter](https://agentprime.io/advisories/CVE-2024-13362.md)
  `CVE-2024-13362` · CVE record: sebet Go Fetch Jobs (for WP Job Manager) and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 1 May 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58799.md)
  `CVE-2025-58799` · CVE record: themelocation Custom WooCommerce Checkout Fields Editor · CVSS 4.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-33956.md)
  `CVE-2024-33956` · CVE record: ThemeLocation Custom WooCommerce Checkout Fields Editor · CVSS 4.3 Medium · Not analysed yet · Published 2 May 2024 · Tags: Broken access control
- [WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-30518.md)
  `CVE-2024-30518` · CVE record: ThemeLocation Custom WooCommerce Checkout Fields Editor · CVSS 4.3 Medium · Not analysed yet · Published 29 Mar 2024 · Tags: Cross-site request forgery (CSRF)
- [Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-1697.md)
  `CVE-2024-1697` · CVE record: themelocation Custom WooCommerce Checkout Fields Editor · CVSS 6.4 Medium · Not analysed yet · Published 23 Mar 2024 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=themelocation-custom-woocommerce-checkout-fields-editor>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/themelocation-custom-woocommerce-checkout-fields-editor/>. Everything for agents: <https://agentprime.io/llms.txt>.