Vulnerabilities / Checkout Files Upload for WooCommerce
Checkout Files Upload for WooCommerce vulnerabilities
Advisories WPSec published for Checkout Files Upload for WooCommerce. Other sources may list more. Its attack surface: Checkout Files Upload for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-06 | WPSEC-2026-2646 | Checkout Files Upload for WooCommerce <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via Uploaded Files | Medium 6.1 | 2.4.1 |
License: CC BY 4.0