Vulnerabilities

TI-2024-20643 CVE-2024-31267 · GHSA-m63c-qqgh-g8hh

WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00323 Published 2024-06-09 No fix listed CWE-862

TI-2020-18902 CVE-2020-36731 · GHSA-x5rc-5886-54gw

Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update

MEDIUM 40

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01342 Published 2023-06-07 Fixed in 2.3.2 CWE-79

Vulnerabilities

Filters

WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update