Plugin icon

Checkout Field Manager (Checkout Manager) for WooCommerce

woocommerce-checkout-manager

Vulnerabilities:

8

Last Updated:

September 30, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-10-14
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.9.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID
Fixed in
Fixed in 7.9.7
CVSS
8.1 (high)
Published
2026-09-17
Title
Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Unvalidated Attachment ID Reparenting
Fixed in
Fixed in 7.9.7
CVSS
4.3 (medium)
Published
2026-09-17
Title
Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Customer Address Custom Field
Fixed in
Fixed in 7.9.7
CVSS
4.3 (medium)
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
Fixed in
Fixed in 7.8.6
CVSS
5.3 (medium)
Published
2026-02-18
Title
Checkout Field Manager (Checkout Manager) for WooCommerce < 7.8.2 - Unauthenticated Limited File Upload
Fixed in
Fixed in 7.8.2
CVSS
5.3 (medium)
Published
2023-11-09
Title
WooCommerce Checkout Manager < 7.3.1 - Missing Authorization
Fixed in
Fixed in 7.3.1
CVSS
6.5 (medium)
Published
2022-06-14
Title
Checkout Fields Manager for WooCommerce < 5.5.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.5.7
CVSS
6.1 (medium)
Published
2019-04-25
Title
WooCommerce Checkout Manager < 4.3 - Arbitrary File Upload
Fixed in
Fixed in 4.3
CVSS
7.5 (high)