{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/checkout-files-upload-for-woocommerce-n/a-through-2.4.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wp_wham:checkout_files_upload_for_woocommerce:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-123463"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Checkout Files Upload for WooCommerce (n/a through 2.4.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["WP Wham"],"content_html":"\u003cp\u003eThe Checkout Files Upload for WooCommerce plugin (checkout-files-upload-woocommerce), in versions from n/a through 2.4.0, is affected by an Improper Neutralization of Input During Web Page Generation vulnerability, identified as Stored Cross-site Scripting (XSS).\u003c/p\u003e\n","date_modified":"2026-11-09T11:39:57Z","date_published":"2026-11-09T11:39:57Z","id":"https://feed.craftedsignal.io/briefs/2026-11-checkout-files-xss/","summary":"The Checkout Files Upload for WooCommerce plugin (versions up to and including 2.4.0) contains an improper neutralization of input vulnerability, resulting in Stored Cross-Site Scripting (XSS).","title":"WP Wham Checkout Files Upload for WooCommerce: Stored Cross-Site Scripting (CVE-2026-123463)","url":"https://feed.craftedsignal.io/briefs/2026-11-checkout-files-xss/"}],"language":"en","title":"CraftedSignal Threat Feed - Checkout Files Upload for WooCommerce (N/a Through 2.4.0)","version":"https://jsonfeed.org/version/1.1"}