Medium · 5.4 CVE-2024-31262 EUVD-2024-29158GHSA-wfv8-v329-vr74

WordPress WooCommerce Checkout Field Editor (Checkout Manager) plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Published Apr 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jcodex Product: WooCommerce Checkout Field Editor (Checkout Manager) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Jcodex WooCommerce Checkout Field Editor (Checkout Manager).This issue affects WooCommerce Checkout Field Editor (Checkout Manager): from n/a through 2.1.8.

Affected products

Vendor	Product	Affected	Fixed
Jcodex	WooCommerce Checkout Field Editor (Checkout Manager)	≤ 2.1.8	—

References

https://patchstack.com/database/vulnerability/woo-checkout-regsiter-field-editor/wordpress-woocommerce-checkout-field-editor-checkout-manager-plugin-2-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry