CVE-2020-36731

The CVE-2020-36731 case concerns the WordPress plugin “Flexible Checkout Fields for WooCommerce.” The vulnerability affects versions up to 2.3.1 and stems from missing authorization checks in the updateSettingsAction() function (called via an admin_init hook) and insufficient sanitization/escapin...

CVE-2024-31267

CVE-2024-31267 refers to a Missing Authorization vulnerability in the WordPress plugin WP Desk Flexible Checkout Fields for WooCommerce , affecting versions from unknown through 4.1.2 . The vulnerability is described as allowing unauthorized access (Missing Authorization) with a high impact acros...