CVE-2024-35658

CRITICO 9.1CVE-2024-35658 · Published 10/06/2024 · updated 17/06/2026

In breve

CVE-2024-35658 è una vulnerabilità CRITICO (CVSS 9.1) che riguarda checkout field editor for woocommerce (themehigh).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.59%, superiore al 48.3% delle vulnerabilità.
Correzione: aggiornare a 3.6.3 o successiva.

Package	Affected versions	Patched versions
checkout field editor for woocommerce themehigh	`< 3.6.3`	`3.6.3`

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro): from n/a through 3.6.2.

References

patchstack.com/database/vulnerability/woocommerce-checkout-field-editor-pro/wordpress-checkout-field-editor-for-woocommerce-pro-plugin-3-6-2-unauthenticated-arbitrary-file-deletion-vulnerability · Third Party Advisory

Altre vulnerabilità di checkout field editor for woocommerce

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free