Approved changes feed: RSS · Atom

cpe:2.3:a:wpdesk:flexible_checkout_fields:*:*:*:*:free:wordpress:*:*

part: a version: * update: *

VendorWpdesk (54fd216e-520f-595d-9e1c-4e7d99dadc3a)
ProductFlexible Checkout Fields (c3742f32-f45d-5377-8611-3e745dde5eb7)
Edition*
Language*
Software editionfree
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31267 vulnerable 2026-06-08 06:35:31.202170 WordPress Flexible Checkout Fields for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in WP Desk Flexible Checkout Fields for WooCommerce.This issue affects Flexible Checkout Fields for WooCommerce: from n/a through 4.1.2.
Published: 2024-06-09T11:14:37.349Z
Updated: 2026-04-28T16:09:29.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36731 vulnerable 2026-06-08 05:25:49.494811 Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update
HIGH (7.2)
The Flexible Checkout Fields for WooCommerce plugin for WordPress is vulnerable to Unauthenticated Arbitrary Plugin Settings update, in addition to Stored Cross-Site Scripting in versions up to, and including, 2.3.1. This is due to missing authorization checks on the updateSettingsAction() function which is called via an admin_init hook, along with missing sanitization and escaping on the settings that are stored.
Published: 2023-06-07T01:51:54.328Z
Updated: 2026-04-08T17:34:52.923Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.