WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
order-auto-complete-for-woocommerce
Published
2023-10-18
Title
Order auto complete for WooCommerce < 1.2.1 - Admin+ Stored XSS
Slug
order-delivery-date
Published
2023-10-02
Title
Order Delivery Date for WP e-Commerce <= 1.2 - Admin+ Stored XSS
Slug
order-delivery-date
Published
2023-09-05
Title
Order Delivery Date for WP e-Commerce <= 1.2 - Settings Update via CSRF
Slug
order-delivery-date
Published
2024-01-29
Title
Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting
Slug
order-delivery-date
Published
2025-04-04
Title
Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update
Slug
order-delivery-date
Published
2025-04-29
Title
Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS
Slug
order-delivery-date
Published
2025-06-20
Title
Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
Slug
order-delivery-date-for-woocommerce
Published
2023-09-25
Title
Order Delivery Date for WooCommerce < 3.20.1 - Reflected XSS
Slug
order-delivery-date-for-woocommerce
Published
2024-04-12
Title
Order Delivery Date for WooCommerce < 3.21.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
order-delivery-date-for-woocommerce
Published
2025-09-03
Title
Order Delivery Date for WooCommerce < 4.2.0 - Missing Authorization
Slug
order-delivery-date-for-woocommerce
Published
2025-12-03
Title
Order Delivery Date for WooCommerce < 4.3.2 - Missing Authorization
Slug
order-delivery-pickup-location-date-time-free-version
Published
2024-12-14
Title
Order Delivery & Pickup Location Date Time ( Free Version ) <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update
Slug
order-export-and-more-for-woocommerce
Published
2024-08-12
Title
Order Export for WooCommerce < 3.24 - Unauthenticated Sensitive Information Exposure
Slug
order-export-and-more-for-woocommerce
Published
2025-01-30
Title
Order Export for WooCommerce < 3.25 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
order-hours-scheduler-for-woocommerce
Published
2024-09-25
Title
Store Hours for WooCommerce < 4.3.22 - Reflected Cross-Site Scripting
Slug
order-import-export-for-woocommerce
Published
2016-09-19
Title
Order Export Import for WooCommerce 1.0.8 - Order Information Disclosure
Slug
order-import-export-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
order-import-export-for-woocommerce
Published
2024-01-10
Title
Order Export & Order Import for WooCommerce < 2.4.4 - Shop Manager+ Arbitrary File Upload
Slug
order-import-export-for-woocommerce
Published
2024-05-14
Title
Order Export & Order Import for WooCommerce < 2.5.0 - Authenticated (Administrator+) PHP Object Injection
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Slug
order-import-export-for-woocommerce
Published
2025-10-30
Title
Order Export & Order Import for WooCommerce < 2.6.8 - Missing Authorization
Slug
order-notification-for-telegram
Published
2024-10-24
Title
Order Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message