{
    "title": "Checkout Field Editor for WooCommerce",
    "seo_title": "Checkout Field Editor for WooCommerce: review and settings",
    "h1": "Checkout Field Editor for WooCommerce",
    "description": "Checkout Field Editor for WooCommerce in detail: classic and block checkout fields, free vs Pro, limits, recommended settings and patched vulnerabilities.",
    "lead": "Checkout Field Editor, ThemeHigh’s freemium plugin, adds, hides and reorders WooCommerce checkout fields on both classic and block checkout. Our take to help you choose between free and Pro, the settings that protect the data you collect, and the vulnerabilities already patched.",
    "language": "en",
    "locale": "en-US",
    "type": "plugin-sheet",
    "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/",
    "canonical": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/",
    "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/index.md",
    "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/index.json",
    "published": "2026-11-04T08:00:00+00:00",
    "modified": "2026-11-05T21:02:32+00:00",
    "site": {
        "name": "WP Masquerade",
        "url": "https://www.wp-masquerade.com/"
    },
    "translations": [
        {
            "language": "en",
            "hreflang": "en-US",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/checkout-field-editor-for-woocommerce/index.json"
        },
        {
            "language": "fr",
            "hreflang": "fr-FR",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/checkout-field-editor-for-woocommerce/index.json"
        },
        {
            "language": "es",
            "hreflang": "es-ES",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/checkout-field-editor-for-woocommerce/index.json"
        },
        {
            "language": "de",
            "hreflang": "de-DE",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/checkout-field-editor-for-woocommerce/index.json"
        },
        {
            "language": "it",
            "hreflang": "it-IT",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/checkout-field-editor-for-woocommerce/index.json"
        },
        {
            "language": "pt",
            "hreflang": "pt-BR",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/checkout-field-editor-for-woocommerce/index.json"
        },
        {
            "language": "nl",
            "hreflang": "nl-NL",
            "title": "Checkout Field Editor for WooCommerce",
            "url": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/checkout-field-editor-for-woocommerce/",
            "markdown": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/checkout-field-editor-for-woocommerce/index.md",
            "json": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/checkout-field-editor-for-woocommerce/index.json"
        }
    ],
    "headings": [
        {
            "level": 1,
            "text": "Checkout Field Editor for WooCommerce"
        },
        {
            "level": 2,
            "text": "What Checkout Field Editor does on your store"
        },
        {
            "level": 2,
            "text": "Which stores Checkout Field Editor suits"
        },
        {
            "level": 2,
            "text": "Checkout Field Editor strengths and limits"
        },
        {
            "level": 3,
            "text": "Strengths"
        },
        {
            "level": 3,
            "text": "Limits"
        },
        {
            "level": 2,
            "text": "The Checkout Field Editor settings we recommend"
        },
        {
            "level": 2,
            "text": "Checkout Field Editor security: three patched vulnerabilities"
        },
        {
            "level": 2,
            "text": "Checkout Field Editor FAQ",
            "id": "faq"
        }
    ],
    "body": "## The essentials\n\n- Best for removing or adding WooCommerce checkout fields without code, on classic or block checkout.\n- Main caveat: conditional logic, priced fields and file uploads require the Pro version.\n- Free; Pro runs $49 a year for one site, $99 for up to 5 sites and $199 for up to 25.\n\n## What Checkout Field Editor does on your store\n\nCheckout Field Editor (Checkout Manager) for WooCommerce, built by the Indian developer ThemeHigh, lets you change the [WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce/) checkout form without writing code. You can rename, drag and drop, make optional, disable or delete the billing, shipping and additional fields, and add new ones. If you don’t like the result, a single button brings back the original WooCommerce fields.\n\nThe plugin handles both kinds of checkout, each with its own editor: “Classic Checkout” for a page built with the shortcode, “Block Checkout” for the Checkout block. The free version offers 20 field types on classic checkout (text, number, email, phone, select, checkboxes, dates, heading, paragraph and more) but only 10 on block checkout. It adds basic validation (number, email, phone, postcode, URL) and, for each field, a choice of whether it shows up in emails and order details. Submitted values are saved with the order.\n\nIt follows a freemium model. The Pro version, sold on ThemeHigh’s website, adds file uploads, conditional display (cart contents, user role, product, shipping or payment method), fields that change the price (fixed fees, percentages, tips), custom validation rules and 14 section positions on the page.\n\n![Diagram: Checkout Field Editor for WooCommerce works on visitors and bots, database and files, external services. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); CSS classes (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/checkout-field-editor/diagram-en.svg?v=cd711270)\n\n## Which stores Checkout Field Editor suits\n\nThe plugin is mostly used to shorten the form or to collect something WooCommerce doesn’t ask for:\n\n- **Digital products**: drop the shipping address, company or phone fields you don’t need to sell a file.\n- **B2B sales**: add a VAT number, a purchase order reference or a department name.\n- **Local businesses**: ask for a time slot, a pickup date or delivery instructions.\n- **Multilingual stores**: labels can be translated with WPML, Polylang or Loco Translate.\n\nIt’s not the right pick if all you need is one extra field on the Checkout block and a developer looks after the site: WooCommerce ships an Additional Checkout Fields API for that, documented on its developer site, with no extra plugin. Nor if you need conditions or fees from day one: that takes the Pro version.\n\n## Checkout Field Editor strengths and limits\n\n### Strengths\n\n- **Easy to pick up.** One table per section, drag and drop, Enabled and Required checkboxes: no code at all.\n- **Classic and blocks covered.** Each checkout type has its own editor, which helps during a move to blocks.\n- **Easy rollback.** “Reset to default fields” restores the WooCommerce fields, and settings export as text to another site.\n- **Per-field visibility.** Any added field can be kept out of emails or order pages, which limits how far sensitive data travels.\n\n### Limits\n\n- **Block checkout lags behind.** 10 field types on blocks versus 20 on classic, and some options remain classic-only.\n- **The key features are Pro.** Conditions, priced fields, file uploads, custom validation and fields in My Account all require the paid version.\n- **Two setups to maintain.** Fields created for classic checkout don’t show up in the block, and vice versa.\n- **Uneven translations.** Depending on the admin language, part of the interface stays in English.\n\n## The Checkout Field Editor settings we recommend\n\nEverything lives under WooCommerce > Checkout Form (version 2.2.1). Start by picking the “Classic Checkout” or “Block Checkout” tab, matching the page your store actually uses.\n\n| Setting | Recommended value | Why |\n| --- | --- | --- |\n| **Editor to change**  Checkout Form > Checkout Fields | The one your checkout page uses (shortcode or block) | A field created in the wrong editor never reaches customers. |\n| **Enabled** (unneeded fields) Checkout Fields > Billing Fields > Edit | Unchecked rather than deleted | Disabling is undone in one click; keep country and postcode if your taxes or shipping rates depend on them. |\n| **Validation**  Edit field window | Email, phone or number, depending on the field | Stops junk input before the order is saved. |\n| **Display in Emails**  Edit field window | Unchecked for personal or internal data | On by default; an email travels and is stored outside your control. |\n| **Type**  Checkout Fields > Add field | Never card numbers, passwords or ID documents | Values are stored in plain text with the order in the WordPress database. |\n| **Plugin Settings Data**  Advanced Settings > Backup and Import Settings | Copy the text before any major change | A backup of your setup, restored with “Import Settings”. |\n| **Automatic updates**  Plugins > Installed Plugins | Enabled | The 2026 vulnerability hit a checkout page open to everyone. |\n\n- Place a test order in a private window, then check the order, the customer email and the admin email.\n- Test every payment method: a hidden or misconfigured required field can break express checkout.\n- List every new piece of data you collect, and how long you keep it, in your privacy policy.\n- If you switch from classic checkout to the block, rebuild your fields in the “Block Checkout” tab before the switch.\n\n## Checkout Field Editor security: three patched vulnerabilities\n\nA plugin that touches the checkout page takes input from anonymous visitors and then displays it in the admin. Three vulnerabilities have been published:\n\n- **March 2026, CVE-2026-3231**: an unauthenticated stored [XSS](https://www.wp-masquerade.com/glossary/xss/) flaw. Radio and checkbox group values sent through the Checkout block were decoded after escaping, and the injected script ran when an administrator opened the order. Versions 2.1.7 and earlier, fixed in 2.1.8.\n- **October 2024, CVE-2024-8499**: a reflected XSS in the review request notice, which required an admin user to click a crafted link. Versions 2.0.3 and earlier, fixed in 2.0.4.\n- **November 2022, CVE-2022-3490**: PHP object injection through [deserialization](https://www.wp-masquerade.com/glossary/insecure-deserialization/) of imported settings, limited to administrators. Fixed in 1.8.0.\n\nWhat to do: stay on the latest version, 2.1.8 at the very least, and only import settings from a site you control. Stored XSS is explained in our article on XSS vulnerabilities in WordPress, payment security in our WooCommerce store security guide. WP Masquerade Pro renames the `woo-checkout-field-editor-pro` folder and its script handles, which makes the plugin harder for bots to spot but doesn’t replace updating; the `thwcfd-*` classes on the checkout page remain visible.\n\n## Checkout Field Editor FAQ\n\n**Why don’t my new fields show up on the checkout page?**\n\nMost of the time they were created in the wrong editor. A page built with the Checkout block reads the “Block Checkout” tab, a shortcode page reads the “Classic Checkout” tab.\n\n**Can I go back to the default WooCommerce fields?**\n\nYes, the “Reset to default fields” button restores them. Export your settings from “Advanced Settings” first if you may want to import them again.\n\n**Can the free version add fees to the cart?**\n\nNo. Fields that change the total (fixed price, percentage, custom amount) are part of the Pro version, as is conditional field display.\n\n**Do added fields show up in My Account?**\n\nNot in the free version, where they can only be seen and edited on the checkout page. The Pro version also shows them in My Account and in the user profile.\n\n## Key facts\n\n- Category: E-commerce\n- Vendor: ThemeHigh\n- Price: Free; Pro costs $49 per year for one site, $99 per year for up to 5 sites, $199 per year for up to 25 sites\n- Active installations (wordpress.org): 400 000+\n- Version: 2.2.1\n- Official page: https://wordpress.org/plugins/woo-checkout-field-editor-pro/\n\n## What WP Masquerade hides\n\n- Handled by WP Masquerade Pro only\n- With Pro: folder name, tag IDs\n- Still visible: CSS classes",
    "catalog": "checkout-field-editor",
    "essentials": [
        "Best for removing or adding WooCommerce checkout fields without code, on classic or block checkout.",
        "Main caveat: conditional logic, priced fields and file uploads require the Pro version.",
        "Free; Pro runs $49 a year for one site, $99 for up to 5 sites and $199 for up to 25."
    ],
    "format": "application/json"
}