CVE-2026-6802: Authorization Bypass Through User-Controlled Key

The Easy Upload Files During Checkout plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.0.1. This is due to missing authorization checks in the ufdccustominit function, which processes the 'eufdc-delete' parameter without any nonce verification,...

CVE-2025-62078

Technical details for CVE-2025-62078 are not publicly provided in the supplied documents. Based on available data, we cannot confirm affected versions, impact, or remediation here. Monitor for vendor advisories and third-party disclosures for this vulnerability.

CVE-2025-62078: Missing Authorization

Missing Authorization vulnerability in Fahad Mahmood Easy Upload Files During Checkout easy-upload-files-during-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Upload Files During Checkout: from n/a through = 3.0.0...

CVE-2025-12682: Unrestricted Upload of File with Dangerous Type

The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'fileduringcheckout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload...