WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
order-export-and-more-for-woocommerce
Published
2024-08-12
Title
Order Export for WooCommerce < 3.24 - Unauthenticated Sensitive Information Exposure
Slug
order-export-and-more-for-woocommerce
Published
2025-01-30
Title
Order Export for WooCommerce < 3.25 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Slug
order-hours-scheduler-for-woocommerce
Published
2024-09-25
Title
Store Hours for WooCommerce < 4.3.22 - Reflected Cross-Site Scripting
Slug
order-import-export-for-woocommerce
Published
2016-09-19
Title
Order Export Import for WooCommerce 1.0.8 - Order Information Disclosure
Slug
order-import-export-for-woocommerce
Published
2020-03-11
Title
Multiple WebToffee Plugins - Cross-Site Request Forgery (CSRF) Issue
Slug
order-import-export-for-woocommerce
Published
2024-01-10
Title
Order Export & Order Import for WooCommerce < 2.4.4 - Shop Manager+ Arbitrary File Upload
Slug
order-import-export-for-woocommerce
Published
2024-05-14
Title
Order Export & Order Import for WooCommerce < 2.5.0 - Authenticated (Administrator+) PHP Object Injection
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Slug
order-import-export-for-woocommerce
Published
2025-03-19
Title
Order Export & Order Import for WooCommerce < 2.6.1 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Slug
order-import-export-for-woocommerce
Published
2025-10-30
Title
Order Export & Order Import for WooCommerce < 2.6.8 - Missing Authorization
Slug
order-minimum-amount-for-woocommerce
Published
2026-01-27
Title
Order Minimum/Maximum Amount Limits for WooCommerce < 4.6.9 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields
Slug
order-notification-for-telegram
Published
2024-10-24
Title
Order Notification for Telegram <= 1.0.1 - Missing Authorization to Unauthenticated Send Telegram Test Message
Slug
order-on-chat-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
order-on-chat-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-picking-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-post
Published
2025-04-09
Title
ORDER POST <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
order-redirects-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
order-status-for-woocommerce
Published
2024-12-03
Title
Additional Custom Order Status for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting
Slug
order-status-rules-for-woocommerce
Published
2025-03-27
Title
Scheduled & Automatic Order Status Controller for WooCommerce < 3.7.2 - Open Redirect
Slug
order-tip-woo
Published
2024-03-19
Title
Order Tip for WooCommerce < 1.4.0 - Missing Authorization to Unauthenticated Data Export
Slug
order-tip-woo
Published
2025-08-14
Title
Order Tip for WooCommerce < 1.5.5 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
Slug
order-tracking
Published
2023-08-28
Title
Order Tracking Pro < 3.3.7 - Admin+ Stored Cross-Site Scripting
Slug
order-tracking
Published
2023-08-28
Title
Order Tracking Pro < 3.3.7 - Reflected Cross-Site Scripting