plugin

Woo Custom Checkout Field Vulnerabilities

1 known security issue reported for the Woo Custom Checkout Field WordPress plugin. Most recent disclosed Jul 26, 2016.

1 medium

Running Woo Custom Checkout Field on your site? Check whether your installed version is affected.

Scan your site free

Woo Custom Checkout Field < 1.3.5 - Cross-Site Scripting

medium

The Woo Custom Checkout Field plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions before 1.3.5 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:: 6.1
Affected:: up to 1.3.5
Fixed in:: 1.3.5
Disclosed:: Jul 26, 2016

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database