PLUGIN SECURITY
Is Woo Checkout Field Editor Pro safe?
Checkout Field Editor (Checkout Manager) for WooCommerce – The best WooCommerce checkout manager plugin to manage WooCommerce checkout fields.
What this plugin does
- Slug:
woo-checkout-field-editor-pro - Author: ThemeHigh
- 400000+ active installs
- 98/100 rating (1056 reviews on wordpress.org)
- 10530138 all-time downloads
- On WordPress.org since 2015-10-23
checkout field editorcheckout managercustom fieldsWooCommerce checkoutWoocommerce checkout field
Maintenance status
- Latest known version: 2.1.9
- Last updated: 2026-06-11 10:35am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
3 known CVEs on file for Woo Checkout Field Editor Pro.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-8499 | Checkout Field Editor (Checkout Manager) for WooCommerce [woo-checkout-field-editor-pro] < 2.0.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.0.4 | 2.0.4 | 2024-10-03 | ✓ fixed in latest |
| CVE-2022-3490 | Checkout Field Editor (Checkout Manager) for WooCommerce [woo-checkout-field-editor-pro] < 1.8.0 | Deserialization of Untrusted Data | High 7.2 | < 1.8.0 | 1.8.0 | 2022-11-07 | ✓ fixed in latest |
| — | Checkout Field Editor (Checkout Manager) for WooCommerce [woo-checkout-field-editor-pro] < 2.1.8 | — | Unknown | < 2.1.8 | 2.1.8 | 0000-00-00 | ✓ fixed in latest |
| CVE-2026-3231 | Checkout Field Editor (Checkout Manager) for WooCommerce < 2.1.8 - Unauthenticated Stored XSS via Block Checkout Custom Radio Field | — | Unknown | < 2.1.8 | 2.1.8 | — | ✓ fixed in latest |
How to fix it
Keep Woo Checkout Field Editor Pro updated — 2.1.9 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Checkout Field Manager (Checkout Manager) for WooCommerce — 80000+ active installs — 90/100 (781) — max PHP 8.4
- Digital Goods (Checkout Field Editor) for WooCommerce Checkout — 3000+ active installs — 90/100 (41) — max PHP 8.4
- Custom WooCommerce Checkout Fields Editor — 2000+ active installs — 68/100 (18) — max PHP 8.4
- Checkout Field Editor (Checkout Manager) for WooCommerce — 2000+ active installs — 94/100 (35) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.