一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月16日

CVE-2026-17031 [HIGH] – The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vuln

未分类
📑 文章目录

The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary Media Library attachments.