PLUGIN SECURITY
Is Add Fields To Checkout Page Woocommerce safe?
Custom WooCommerce Checkout Fields Editor
What this plugin does
- Slug:
add-fields-to-checkout-page-woocommerce - Author: themelocation
- 2000+ active installs
- 68/100 rating (18 reviews on wordpress.org)
- 77715 all-time downloads
- On WordPress.org since 2017-03-27
checkout field editorWooCommerce checkoutwoocommerce checkout fieldsWooCommerce checkout managerwoocommerce custom fields
Maintenance status
- Latest known version: 1.3.4
- Last updated: 2025-01-01 11:45am GMT
- Tested up to WordPress: 6.7.7
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
6 known CVEs on file for Add Fields To Checkout Page Woocommerce. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-13362 | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] <= 1.3.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 1.3.4 | 1.3.4 | 2026-04-30 | ✓ fixed in latest |
| CVE-2025-58799 | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] <= 1.3.4 (unfixed) | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.3.4 | 1.3.4 | 2025-09-05 | ✓ fixed in latest |
| CVE-2024-33956 | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.3.2 | Missing Authorization | Medium 4.3 | < 1.3.2 | 1.3.2 | 2024-04-30 | ✓ fixed in latest |
| CVE-2024-30518 | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.3.1 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.3.1 | 1.3.1 | 2024-03-28 | ✓ fixed in latest |
| CVE-2024-1697 | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.3.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.3.2 | 1.3.2 | 2024-03-22 | ✓ fixed in latest |
| CVE-2023-33999 | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.3.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 1.3.0 | 1.3.0 | 2023-07-18 | ✓ fixed in latest |
| — | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.2.7 | Missing Authorization | Medium 6.3 | < 1.2.7 | 1.2.7 | 2022-03-04 | ✓ fixed in latest |
| — | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.2.7 | — | Unknown | < 1.2.7 | 1.2.7 | 2022-02-28 | ✓ fixed in latest |
+ 2 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | Custom WooCommerce Checkout Fields Editor [add-fields-to-checkout-page-woocommerce] < 1.2.7 | — | Unknown | < 1.2.7 | 1.2.7 | 2022-02-28 | ✓ fixed in latest |
| — | Unauthorised AJAX Calls via Freemius | — | Unknown | < 1.2.7 | 1.2.7 | — | ✓ fixed in latest |
How to fix it
Keep Add Fields To Checkout Page Woocommerce updated — 1.3.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Checkout Field Editor (Checkout Manager) for WooCommerce — 400000+ active installs — 98/100 (1056) — max PHP 8.4
- Checkout Field Manager (Checkout Manager) for WooCommerce — 80000+ active installs — 90/100 (781) — max PHP 8.4
- Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager — 80000+ active installs — 94/100 (295) — max PHP 8.4
- FunnelKit – Funnel Builder for WooCommerce Checkout — 30000+ active installs — 100/100 (1015)
- Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster — 30000+ active installs — 100/100 (109)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.