This vulnerability is a CSRF issue in the Jcodex WooCommerce Checkout Field Editor (Checkout Manager) plugin for WooCommerce, affecting versions through 2.1.8. It allows an attacker to trick an authenticated user into submitting unauthorized requests that could alter the checkout field configurations or related settings. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No vendor advisory or patch information is currently available.

An attacker could exploit this vulnerability to cause an authenticated administrator to perform unintended configuration changes in the WooCommerce checkout fields, potentially impacting the integrity and availability of the checkout process. There is no direct confidentiality impact reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should consider limiting access to the plugin's administrative functions and ensure users do not visit untrusted websites while authenticated in the WordPress admin area. Monitor official Jcodex communications for updates on patches or mitigations.