Skip to content
Threat Feed
Subscribe

Product

Checkout Field Manager (Checkout Manager) (<= 7.9.6)

1 brief RSS
high advisory

Authorization Bypass in Checkout Field Manager for WooCommerce

The Checkout Field Manager plugin for WordPress contains an authorization bypass vulnerability allowing low-privileged authenticated users to delete arbitrary files from the Media Library.

Checkout Field Manager web-application wordpress vulnerability cve-2026-17031
1t 1c