WordPress Plugin Vulnerabilities

Order XML File Export Import for WooCommerce <= 1.2.2 - XSS

Description

The Order XML File Export Import for WooCommerce WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
order-xml-file-export-import-for-woocommerce
Fixed in 1.2.3

References

URL
https://plugins.trac.wordpress.org/changeset/2002874

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
0f946407-cc88-4fc9-95dc-987dfc77fe03

Timeline

Publicly Published
2018-12-28 (about 7 years ago)
Added
2019-08-01 (about 6 years ago)
Last Updated
2019-08-01 (about 6 years ago)

Other

Published
Title
Published
2025-10-27
Title
Sahifa < 5.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-05-11
Title
Advanced Social Media Icons <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'social' Shortcode
Published
2025-07-15
Title
Affiliate Reviews < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via numColumns Parameter
Published
2024-04-09
Title
Premium Addons for Elementor < 4.10.17 - Contributor+ Stored Cross-Site Scripting via Wrapper Link Widget
Published
2025-08-07
Title
WP-jScrollPane <= 2.0.3 - Reflected Cross-Site Scripting