Checkout Files Upload for WooCommerce (N/a Through 2.4.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/checkout-files-upload-for-woocommerce-n/a-through-2.4.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 11:39:57 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWP Wham Checkout Files Upload for WooCommerce: Stored Cross-Site Scripting (CVE-2026-123463)https://feed.craftedsignal.io/briefs/2026-11-checkout-files-xss/Mon, 09 Nov 2026 11:39:57 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-checkout-files-xss/The Checkout Files Upload for WooCommerce plugin (versions up to and including 2.4.0) contains an improper neutralization of input vulnerability, resulting in Stored Cross-Site Scripting (XSS).<p>The Checkout Files Upload for WooCommerce plugin (checkout-files-upload-woocommerce), in versions from n/a through 2.4.0, is affected by an Improper Neutralization of Input During Web Page Generation vulnerability, identified as Stored Cross-site Scripting (XSS).</p> highadvisory