The Checkout Field Editor for WooCommerce (Pro) plugin is vulnerable to a directory traversal flaw that allows authenticated users with subscriber-level access or higher to supply a crafted value to the 'thwcfe_legacy_file' parameter. By manipulating this parameter, an attacker can read the contents of any file on the server that is readable by the web‐process, exposing sensitive data such as configuration files, credentials, or private keys. The impact is a breach of confidentiality of data stored on the host.

The vulnerability affects all versions of the Themehigh Checkout Field Editor for WooCommerce (Pro) plugin up to and including version 3.7.7, regardless of other WordPress extensions or themes.

The CVSS score of 6.5 indicates moderate severity, while the EPSS score of less than 1% suggests a very low probability of exploitation at present. The issue is not listed in the CISA KEV catalog. Exploitation requires a valid authenticated account with at least subscriber privileges and access to the plugin’s administrative interface; the attacker then sends a request containing a malicious file path in the 'thwcfe_legacy_file' parameter, resulting in an arbitrary file read.