Skip to content

Known vulnerabilities in ThemeHigh Checkout Field Editor for WooCommerce (Pro)

Is your version affected?

CVE Summary Score Published
CVE-2026-122041 Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action 9.1 Critical Nov 7, 2026

Other ThemeHigh products