What’s Vulnerable › Products

themehigh Checkout Field Editor (Checkout Manager) for WooCommerce vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your themehigh Checkout Field Editor (Checkout Manager) for WooCommerce version is affected

Latest themehigh Checkout Field Editor (Checkout Manager) for WooCommerce vulnerabilities

• CVE-2026-14955 — Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter (CVSS 6.5)
• CVE-2026-3231 — Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field (CVSS 7.2)
• CVE-2024-8499 — Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice (CVSS 6.1)
• CVE-2024-35658 — WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability (CVSS 9.1)
• CVE-2022-3490 — Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection (CVSS 7.2)