CVE-2025-12500 - Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - unauthentic...

CVE-2025-12500 - Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - unauthentic...

CVE ID : CVE-2025-12500 Published : Feb. 19, 2026, 3:25 a.m. | 50 minutes ago Description : The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to unauthenticated limited file upload in all versions up to, and including, 7.8.1. This is due to the plugin not properly verifying that a user is authorized to perform file upload actions via the

CVE Details

Published
Feb. 19, 2026
Affected Product: WordPress