Is Woo Checkout Field Editor Pro safe?

Plugin details

• Slug: woo-checkout-field-editor-pro
• Requires PHP: 5.6+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• Checkout Field Editor (Checkout Manager) for WooCommerce [woo-checkout-field-editor-pro] < 1.8.0 [CVE-2022-3490, WordPress Checkout Field Editor for WooCommerce plugin <= 1.7.2 - Auth PHP Object Injection vulnerability, Checkout Field Editor <= 1.7.2 - Authenticated (Admin+) PHP Object Injection, Checkout Field Editor for WooCommerce &lt; 1.8.0 - Admin+ PHP Object Injection]
• Checkout Field Editor (Checkout Manager) for WooCommerce [woo-checkout-field-editor-pro] < 2.0.4 [CVE-2024-8499, WordPress Checkout Field Editor (Checkout Manager) for WooCommerce Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS), Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting via render_review_request_notice]
• Checkout Field Editor (Checkout Manager) for WooCommerce [woo-checkout-field-editor-pro] < 2.1.8 [CVE-2026-3231, Checkout Field Editor (Checkout Manager) for WooCommerce <= 2.1.7 - Unauthenticated Stored Cross-Site Scripting via Block Checkout Custom Radio Field]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Checkout Field Manager (Checkout Manager) for WooCommerce — 90000+ active installs — max PHP 8.4
• Digital Goods (Checkout Field Editor) for WooCommerce Checkout — 3000+ active installs — max PHP 8.4
• Custom WooCommerce Checkout Fields Editor — 2000+ active installs — max PHP 8.4
• Checkout Field Editor (Checkout Page Manager) for WooCommerce — 2000+ active installs