Threat Database

Threat Entry Updated 2026-11-09

Checkout Files Upload Woocommerce - Security Vulnerability (CVE-2026-123463)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Upload for WooCommerce: from n/a through 2.4.0.

PLUGIN Checkout Files Upload Woocommerce

CVE-2026-123463

HIGH CVSS 7.1 2026-11-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Checkout Files Upload Woocommerce - Broken Access Control (CVE-2026-42725)

Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Files Upload for WooCommerce: from n/a through

PLUGIN Checkout Files Upload Woocommerce

CVE-2026-42725

MEDIUM CVSS 6.5 2026-05-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Checkout Files Upload Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-39520)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Upload for WooCommerce: from n/a through

PLUGIN Checkout Files Upload Woocommerce

CVE-2025-39520

MEDIUM CVSS 6.5 2025-04-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Checkout Files Upload Woocommerce - Cross-Site Scripting (XSS) (CVE-2022-29425)

Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin

PLUGIN Checkout Files Upload Woocommerce

CVE-2022-29425

MEDIUM CVSS 6.1 2022-05-20

Risk Score

Open Full Technical Breakdown