CVE-2025-58799

The Custom WooCommerce Checkout Fields Editor plugin for WordPress contains a vulnerability that allows an attacker to trick an administrator into performing an unauthorized action. This can be done by exploiting a missing or incorrect nonce validation in the plugin's code, which allows an attacker to bypass security checks and execute malicious actions without needing to authenticate.

Based on public CVE data (MITRE/NVD).