wpdesk Vulnerabilities and Affected Products
Vulnerabilities associated with Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager.
Products
Clear product- Flexible Refund and Return Order for WooCommerce3 vulnerabilities
- Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later2 vulnerabilities
- ShopMagic2 vulnerabilities
- Autopay dla WooCommerce1 vulnerability
- Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager1 vulnerability
- Flexible Cookies1 vulnerability
- Flexible PDF Coupons1 vulnerability
- Flexible PDF Invoices for WooCommerce & WordPress1 vulnerability
- flexible_checkout_fields1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-36731HIGH | Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings UpdateThe Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction() function which is called via an admin_init hook, along with missing sanitization and escaping on the settings that are stored. | CVSS7.2v3.1 | EPSS1.34% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |