Checkout Field Visibility For Woocommerce Vulnerabilities

[en] Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zamartz Checkout Field Visibility for WooCommerce allows PHP Local File Inclusion. This issue affects Checkout Field Visibility for WooCommerce: from n/a through 1.2.3.

Affected:

up to 1.2.3

Fix:

No patched version reported

Disclosed:

Apr 24, 2025

CVE-2025-39391 on NVD →

The Checkout Field Visibility for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.0. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be...

CVSS:

9.8

Affected:

up to 1.3.0

Fixed in:

1.4.0

Disclosed:

Apr 21, 2025

CVE-2025-39391 on NVD →