CVE-2026-123122 | WooCommerce Checkout Files Upload for WooCommerce Plugin up to 2.4.0 on WordPress File Upload cross site scripting

A vulnerability has been found in WooCommerce Checkout Files Upload for WooCommerce Plugin up to 2.4.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component File Upload. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-123122. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More