2 matches found
CVE-2026-122041
The Checkout Field Editor for WooCommerce Pro plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in the ajaxremoveuploaded function in versions up to, and including, 3.8.0. The handler is registered for both wpajax and...
9.1CVSS
SaveExploits0References2
EUVD-2026-119214
The Checkout Field Editor for WooCommerce Pro plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in the ajaxremoveuploaded function in versions up to, and including, 3.8.0. The handler is registered for both wpajax and...
9.1CVSS5.9AI score
SaveExploits0References2
20