PT-2023-11873 · WordPress · Wp Desk Flexible Checkout Fields For Woocommerce

Jerome Bruandet · Published 2023-06-07 · Updated 2026-03-12 · CVE-2020-36731

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Flexible Checkout Fields for WooCommerce plugin for WordPress versions up to and including 2.3.1

Description The issue is caused by missing authorization checks on the updateSettingsAction() function, which is called via an admin init hook, and missing sanitization and escaping on stored settings. This leads to Unauthenticated Arbitrary Plugin Settings update and Stored Cross-Site Scripting.

Recommendations For versions up to and including 2.3.1, update to a version that includes the necessary authorization checks and sanitization to prevent Unauthenticated Arbitrary Plugin Settings update and Stored Cross-Site Scripting. As a temporary workaround, consider disabling the updateSettingsAction() function until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-36731

Affected Products

Wp Desk Flexible Checkout Fields For Woocommerce

References · 7

• 🔥 https://wordfence.com/blog/2020/02/site-takeover-campaign-exploits-multiple-zero-day-vulnerabilities · Exploit
• 🔥 https://blog.nintechnet.com/zero-day-vulnerability-fixed-in-wordpress-flexible-checkout-fields-for-woocommerce-plugin · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36731 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36731 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/fd12a952-2e99-41f7-b74c-55c2b7d8deed?source=cve · Note
• https://twitter.com/pdnuclei_bot/status/1970367575776469036 · Twitter Post
• https://t.me/cveNotify/155283 · Telegram Post