Checkout Field Manager (Checkout Manager) for WooCommerce

Checkout Field Manager (Checkout Manager) for WooCommerce has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 8 are fixed as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 5 of the records (63%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Scripting.

Every one of the 8 issues recorded for Checkout Field Manager (Checkout Manager) for WooCommerce has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

8

Get automatic notifications for all Checkout Field Manager (Checkout Manager) for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2026-17031

Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID

Read the full analysis

Vulnerability Records

8 records
2026-10-14 16:29CVE-2026-17031
8.1
High
@nacentoYes
2026-09-17 00:00CVE-2026-87831
4.3
Medium
Md. Moniruzzaman ProdhanYes
2026-09-17 00:00CVE-2026-87829
4.3
Medium
PO-WEI TINGYes
2026-02-18 16:06CVE-2025-13930
5.3
Medium
NosleeP++Yes
2026-02-18 15:22CVE-2025-12500
5.3
Medium
JamiryooYes
2023-11-09 00:00CVE-2023-47681
6.5
Medium
Rafie MuhammadYes
2022-06-14 00:00N/A
6.1
Medium
WPScanTeamYes
2019-04-25 00:00CVE-2019-11807
7.5
High
AnonymousYes
Showing 1–8 of 8 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C