Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-29425 EUVD-2022-33763GHSA-f7c3-85h7-v4f4

WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability

Published May 20, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Wham Product: Checkout Files Upload for WooCommerce (WordPress plugin) Category: Web / CMS

Description

Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress.

Affected products

VendorProductAffectedFixed
WP Wham Checkout Files Upload for WooCommerce (WordPress plugin) <= 2.1.2 – ≤ 2.1.2 —

References