Known vulnerabilities in ThemeHigh Checkout Field Editor for WooCommerce (Pro)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-122041 | Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action | 9.1 Critical | Nov 7, 2026 |
| CVE-2026-14955 | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all… | 6.5 Medium | Jul 25, 2026 |
| CVE-2024-35658 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field… | 8.6 High | Jun 10, 2024 |
Other ThemeHigh products
Payment Gateway of Stripe for WooCommerce 3
Advanced FAQ Manager 2
Checkout Field Editor (Checkout Manager) for WooCommerce 2
Dynamic Pricing and Discount Rules 1
Email Customizer for WooCommerce 1
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder 1
Email Customizer for WooCommerce (Pro) 1
Extra Product Options For WooCommerce | Custom Product Addons and Fields 1
Job Manager & Career – Manage job board listings, and recruitments 1
Stripe Payment Gateway for WooCommerce 1
WooCommerce Extra Product Options Pro 1