8.6 High

CVE-2024-35658 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field…

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro): from n/a through 3.6.2.

Affected products and versions

Product	Affected versions	Fixed in
Checkout Field Editor for WooCommerce (Pro) 3.6	earliest → 3.6.2	No fix stated

The 2 CVEs of Checkout Field Editor for WooCommerce (Pro) →

CVE-2026-14955 The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all… 6.5 Medium

Do you use Checkout Field Editor for WooCommerce (Pro)?

Track this CVE Watch Checkout Field Editor for WooCommerce (Pro) Check my SBOMs

www.cveye.io/en/cve/CVE-2024-35658

Timeline

Published June 10, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2024-35658 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field…

Description

Affected products and versions

Other CVEs of Checkout Field Editor for WooCommerce (Pro)