Skip to content
OpenAdvisories
High · 7.5 CVE-2025-39391 EUVD-2025-12070GHSA-mj5g-c536-h5gc

WordPress Checkout Field Visibility for WooCommerce plugin <= 1.3.0 - Local File Inclusion vulnerability

Published Apr 24, 2025 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zamartz Checkout Field Visibility for WooCommerce checkout-field-visibility-for-woocommerce allows PHP Local File Inclusion.This issue affects Checkout Field Visibility for WooCommerce: from n/a through <= 1.3.0.

Affected products

VendorProductAffectedFixed
zamartz Checkout Field Visibility for WooCommerce ≤ 1.3.0 —

References