Skip to main content

Checkout Field Editor For Woocommerce Pro

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2026-14955 Jul 25, 05:34 MEDIUM This Month

Authenticated directory traversal in Checkout Field Editor Pro for WooCommerce up to 3.7.7 enables subscriber-level attackers to read arbitrary server files. Exploitation leverages the 'thwcfe_legacy_file' parameter. No active exploitation or public exploit code is currently known, and EPSS indicates low exploitation probability.

WordPress Path Traversal Checkout Field Editor For Woocommerce Pro Themehigh
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2026-14955
EPSS 1% CVSS 6.5
MEDIUM This Month

Authenticated directory traversal in Checkout Field Editor Pro for WooCommerce up to 3.7.7 enables subscriber-level attackers to read arbitrary server files. Exploitation leverages the 'thwcfe_legacy_file' parameter. No active exploitation or public exploit code is currently known, and EPSS indicates low exploitation probability.

WordPress Path Traversal Checkout Field Editor For Woocommerce Pro +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy