WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
order-on-chat-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
order-on-chat-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-picking-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-post
Published
2025-04-09
Title
ORDER POST <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
order-redirects-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-status-for-woocommerce
Published
2024-12-03
Title
Additional Custom Order Status for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
Slug
order-status-rules-for-woocommerce
Published
2025-03-27
Title
Scheduled & Automatic Order Status Controller for WooCommerce < 3.7.2 - Open Redirect
Slug
order-tip-woo
Published
2024-03-19
Title
Order Tip for WooCommerce < 1.4.0 - Missing Authorization to Unauthenticated Data Export
Slug
order-tip-woo
Published
2025-08-14
Title
Order Tip for WooCommerce < 1.5.5 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
Slug
order-tracking
Published
2023-08-28
Title
Order Tracking Pro < 3.3.7 - Admin+ Stored Cross-Site Scripting
Slug
order-tracking
Published
2023-08-28
Title
Order Tracking Pro < 3.3.7 - Reflected Cross-Site Scripting
Slug
order-tracking
Published
2024-08-16
Title
Order Tracking < 3.3.13 - Missing Authorization via send_test_email()
Slug
order-xml-file-export-import-for-woocommerce
Published
2018-12-28
Title
Order XML File Export Import for WooCommerce <= 1.2.2 - XSS
Slug
order-xml-file-export-import-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
order-your-posts-manually
Published
2023-05-10
Title
Order Your Posts Manually <= 2.2.5 - Reflected XSS
Slug
order-your-posts-manually
Published
2023-05-10
Title
Order Your Posts Manually <= 2.2.5 - Admin+ SQLi
Slug
orders-chat-for-woocommerce
Published
2025-12-31
Title
Orders Chat for WooCommerce <= 1.2.0 - Missing Authorization
Slug
organization-chart
Published
2023-02-23
Title
Organization chart < 1.4.5 - Multiple CSRF
Slug
organization-chart
Published
2023-01-27
Title
Organization Chart < 1.4.5 - Admin+ Stored XSS
Slug
organization-chart
Published
2024-08-07
Title
Organization chart < 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
Slug
organizer
Published
2012-04-23
Title
Organizer <= 1.2.1 - Cross Site Scripting / Path Disclosure
Slug
original-texts-yandex-webmaster
Published
2023-10-26
Title
Original texts Yandex WebMaster <= 1.18 - Cross-Site Request Forgery
Slug
originality-ai
Published
2025-10-23
Title
Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'
Slug
originality-ai
Published
2025-10-23
Title
Originality.ai AI Checker <= 1.0.12 - Subscriber+ Scan Log Deletion
Slug
orion-login-with-sms
Published
2025-07-21
Title
Orion Login with SMS <= 1.0.5 - Authenticated Bypass via Weak OTP