Advisories · Technology
themelocation Custom WooCommerce Checkout Fields Editor.
Every CVE that names themelocation Custom WooCommerce Checkout Fields Editor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
- sebet Go Fetch Jobs (for WP Job Manager)
- 5starplugins Dynamic Copyright Year
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress Custom WooCommerce Checkout Fields Editor Plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability
- themelocation Custom WooCommerce Checkout Fields Editor
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Broken Access Control vulnerability
- ThemeLocation Custom WooCommerce Checkout Fields Editor
- Broken access control
- CVSS 4.3 Medium
WordPress Custom WooCommerce Checkout Fields Editor plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability
- ThemeLocation Custom WooCommerce Checkout Fields Editor
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
Custom WooCommerce Checkout Fields Editor <= 1.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- themelocation Custom WooCommerce Checkout Fields Editor
- Cross-site scripting (XSS)