What’s Vulnerable › Products

WP Wham Checkout Files Upload for WooCommerce vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WP Wham Checkout Files Upload for WooCommerce version is affected

Latest WP Wham Checkout Files Upload for WooCommerce vulnerabilities

• CVE-2026-42725 — WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2025-4212 — Checkout Files Upload for WooCommerce <= 2.2.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2025-39520 — WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2022-29425 — WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability (CVSS 6.1)