CVE-2025-12500 | Checkout Field Manager Plugin up to 7.8.1 on WordPress ajax_checkout_attachment_upload unrestricted upload

A vulnerability identified as critical has been detected in Checkout Field Manager Plugin up to 7.8.1 on WordPress. The impacted element is the function ajax_checkout_attachment_upload. Performing a manipulation results in unrestricted upload.

This vulnerability is identified as CVE-2025-12500. The attack can be initiated remotely. There is not any exploit available.