Skip to content
OpenAdvisories

Vendor

ThemeHigh

18 known vulnerabilities.

Products

Checkout Field Editor for WooCommerce (Pro) 3 Payment Gateway of Stripe for WooCommerce 3 Advanced FAQ Manager 2 Checkout Field Editor (Checkout Manager) for WooCommerce 2 Job Manager & Career – Manage job board listings, and recruitments 1 WooCommerce Extra Product Options Pro 1 Extra Product Options For WooCommerce | Custom Product Addons and Fields 1 Stripe Payment Gateway for WooCommerce 1 Dynamic Pricing and Discount Rules 1 Email Customizer for WooCommerce (Pro) 1 Email Customizer for WooCommerce 1 Email Customizer for WooCommerce | Drag and Drop Email Templates Builder 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-122041

    Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action

    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing capability/ownership check in the ajax_remove_uploaded() function in versions up to, and including, 3.8.0. Th…

    ThemeHigh Checkout Field Editor for WooCommerce (Pro) Web / CMS
  • Critical 9.8
    CVE-2024-0705

    Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

    The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on …

    ThemeHigh Payment Gateway of Stripe for WooCommerce Web / CMS
  • Critical 9.6
    CVE-2023-51545

    WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

    Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a …

    ThemeHigh Job Manager & Career – Manage job board listings, and recruitments
  • Critical 9.8
    CVE-2023-3162

    Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass

    The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.7.7. This is due to insufficient verification on the user being supplied during a Stripe checkout through the plugin. Thi…

    ThemeHigh Payment Gateway of Stripe for WooCommerce Web / CMS