CVE · Medium

CVE-2024-33956 — Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.3.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-33956 Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.3.2 Missing Authorization Medium 4.3 < 1.3.2 1.3.2 2024-04-30

CVE-2024-33956

The Custom WooCommerce Checkout Fields Editor plugin through version 1.3.0 contains a broken access control vulnerability that allows unauthorized users to perform restricted actions. The issue was patched in version 1.3.2, making an upgrade necessary to resolve the security flaw. This vulnerability affects all installations running version 1.3.0 or earlier.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.