8.6
Élevée
CVE-2024-35658 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro): from n/a through 3.6.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Checkout Field Editor for WooCommerce (Pro) 3.6 | premières → 3.6.2 | Pas de correctif indiqué |
Autres CVE de Checkout Field Editor for WooCommerce (Pro)
Les 3 CVE de Checkout Field Editor for WooCommerce (Pro) →
CVE-2026-122041
Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action
9.1
Critique
CVE-2026-14955
The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all…
6.5
Moyenne