CVE-2026-122041 | mehigh Checkout Field Editor Plugin up to 3.8.0 on WordPress File Upload ajax_remove_uploaded attachment_id improper authorization

A vulnerability described as critical has been identified in mehigh Checkout Field Editor Plugin up to 3.8.0 on WordPress. Affected by this issue is the function ajax_remove_uploaded of the component File Upload. Executing a manipulation of the argument attachment_id can lead to improper authorization.

This vulnerability appears as CVE-2026-122041. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More