CVE-2026-14955: Checkout Field Editor for WooCommerce (Pro) <= 3.7.7 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'thwcfe_legacy_file' Parameter
The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.7.7 via the 'thwcfelegacyfile' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14955?
CVE-2026-14955 has a medium severity rating of 6.5.
What type of vulnerability is CVE-2026-14955?
CVE-2026-14955 is a Directory Traversal vulnerability affecting the Checkout Field Editor for WooCommerce (Pro) plugin.
How do I fix CVE-2026-14955?
To fix CVE-2026-14955, update the Checkout Field Editor for WooCommerce (Pro) plugin to version 3.7.8 or later.
Who is affected by CVE-2026-14955?
Authenticated users with subscriber-level access and above are affected by CVE-2026-14955.
What can attackers do with CVE-2026-14955?
Attackers can exploit CVE-2026-14955 to read arbitrary files on the server by manipulating the 'thwcfe_legacy_file' parameter.