CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro): from n/a through 3.6.2.
Explanation of Vulnerability in Simple Terms
The Checkout Field Editor for WooCommerce Pro plugin through version 3.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to disrupt site availability. An attacker can craft requests that cause the plugin to consume excessive resources or crash, making the site unavailable to legitimate users. No user interaction is required. Update immediately to a version newer than 3.6.2.
What an attacker can do
Make your WooCommerce site unavailable by triggering resource exhaustion or crashes via path traversal requests.
Potential impact on your site
Your WooCommerce checkout and site may become unavailable during an attack, disrupting sales and customer access.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
