CVE-2020-36731

The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update and Stored Cross-Site Scripting in versions up to and including 2.3.1 . The root cause is a lack of authorization checks on the updateSettingsAction() function (trig...

CVE-2024-31267

CVE-2024-31267 refers to a Missing Authorization vulnerability in the WordPress plugin WP Desk Flexible Checkout Fields for WooCommerce , affecting versions from unknown through 4.1.2 . The vulnerability is described as allowing unauthorized access (Missing Authorization) with a high impact acros...