CVE-2025-58799: Themelocation Custom Woocommerce Checkout Fields Editor

Medium severity, CVSS 4.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in themelocation Custom WooCommerce Checkout Fields Editor add-fields-to-checkout-page-woocommerce allows Cross Site Request Forgery.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through <= 1.3.4.

Affected products

• Themelocation Custom Woocommerce Checkout Fields Editor: up to and including 1.3.4

Published 2025-09-05. Last modified 2026-06-17.