WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
order-delivery-date
Published
2025-04-29
Title
Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS
Slug
order-delivery-date
Published
2025-06-20
Title
Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
Slug
order-delivery-date-for-woocommerce
Published
2023-09-25
Title
Order Delivery Date for WooCommerce < 3.20.1 - Reflected XSS
Slug
order-delivery-date-for-woocommerce
Published
2024-04-12
Title
Order Delivery Date for WooCommerce < 3.21.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
order-delivery-date-for-woocommerce
Published
2025-09-03
Title
Order Delivery Date for WooCommerce < 4.2.0 - Missing Authorization
Slug
order-delivery-date-for-woocommerce
Published
2025-12-03
Title
Order Delivery Date for WooCommerce < 4.3.2 - Missing Authorization
Slug
order-delivery-pickup-location-date-time-free-version
Published
2024-12-14
Title
Order Delivery & Pickup Location Date Time ( Free Version ) <= 1.1.0 - Missing Authorization to Unauthenticated Settings Update
Slug
order-export-and-more-for-woocommerce
Published
2024-08-12
Title
Order Export for WooCommerce < 3.24 - Unauthenticated Sensitive Information Exposure
Slug
order-export-and-more-for-woocommerce
Published
2025-01-30
Title
Order Export for WooCommerce < 3.25 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
order-hours-scheduler-for-woocommerce
Published
2024-09-25
Title
Store Hours for WooCommerce < 4.3.22 - Reflected Cross-Site Scripting
Slug
order-import-export-for-woocommerce
Published
2016-09-19
Title
Order Export Import for WooCommerce 1.0.8 - Order Information Disclosure
Slug
order-import-export-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
order-import-export-for-woocommerce
Published
2024-01-10
Title
Order Export & Order Import for WooCommerce < 2.4.4 - Shop Manager+ Arbitrary File Upload
Slug
order-import-export-for-woocommerce
Published
2024-05-14
Title
Order Export & Order Import for WooCommerce < 2.5.0 - Authenticated (Administrator+) PHP Object Injection
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Slug
order-import-export-for-woocommerce
Published
2025-10-30
Title
Order Export & Order Import for WooCommerce < 2.6.8 - Missing Authorization
Slug
order-minimum-amount-for-woocommerce
Published
2026-01-27
Title
Order Minimum/Maximum Amount Limits for WooCommerce < 4.6.9 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields
Slug
order-notification-for-telegram
Published
2024-10-24
Title
Order Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message
Slug
order-on-chat-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
order-on-chat-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-picking-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-post
Published
2025-04-09
Title
ORDER POST <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution