| CVE-2026-4140 | Ni WooCommerce Order Export <= 3.1.6 - Cross-Site Request Forgery to Settings Update via ni_order_export_action AJAX Action | anzia | Ni WooCommerce Order Export | Medium | 4.3 | 2026-04-22 07:45:34 | Deep Dive |
| CVE-2025-64382 | WordPress Order Export & Order Import for WooCommerce plugin <= 2.6.7 - Broken Access Control vulnerability | WebToffee | Order Export & Order Import for WooCommerce | 中危 | - | 2025-11-13 09:24:35 | Deep Dive |
| CVE-2025-22667 | WordPress Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets plugin <= 1.8.2 - Broken Access Control vulnerability | Creative Werk Designs | Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets | Medium | 4.3 | 2025-03-27 14:24:01 | Deep Dive |
| CVE-2024-13921 | Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter | webtoffee | Order Export & Order Import for WooCommerce | High | 7.2 | 2025-03-20 11:11:28 | Deep Dive |
| CVE-2024-13920 | Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function | webtoffee | Order Export & Order Import for WooCommerce | Medium | 4.9 | 2025-03-20 11:11:28 | Deep Dive |
| CVE-2024-13922 | Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function | webtoffee | Order Export & Order Import for WooCommerce | Low | 2.7 | 2025-03-20 11:11:26 | Deep Dive |
| CVE-2024-13923 | Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function | webtoffee | Order Export & Order Import for WooCommerce | High | 7.6 | 2025-03-20 11:11:26 | Deep Dive |
| CVE-2024-13623 | Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory | webfactory | Order Export for WooCommerce | Medium | 5.9 | 2025-01-31 06:40:18 | Deep Dive |
| CVE-2024-54231 | WordPress Ni WooCommerce Order Export plugin <= 3.1.6 - Reflected Cross Site Scripting (XSS) vulnerability | Anzar Ahmed | Ni WooCommerce Order Export | High | 7.1 | 2024-12-13 14:24:28 | Deep Dive |
| CVE-2024-10828 | Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details | algolplus | Advanced Order Export For WooCommerce | High | 8.1 | 2024-11-13 03:20:07 | Deep Dive |
| CVE-2024-9377 | Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting | wpcodefactory | Export Products, Orders & Customers for WooCommerce | Medium | 6.1 | 2024-10-10 02:06:09 | Deep Dive |
| CVE-2024-43259 | WordPress Order Export for WooCommerce plugin <= 3.23 - Sensitive Data Exposure vulnerability | WebFactory | Order Export for WooCommerce | Medium | 5.3 | 2024-08-26 20:13:25 | Deep Dive |
| CVE-2024-43127 | WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability | WPFactory | Products, Order & Customers Export for WooCommerce | High | 7.1 | 2024-08-12 22:32:18 | Deep Dive |
| CVE-2024-31276 | WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability | WPFactory | Products, Order & Customers Export for WooCommerce | Medium | 5.3 | 2024-06-09 18:14:06 | Deep Dive |
| CVE-2024-34751 | WordPress Order Export & Order Import for WooCommerce plugin <= 2.4.9 - PHP Object Injection vulnerability | WebToffee | Order Export & Order Import for WooCommerce | Medium | 4.4 | 2024-05-16 15:47:13 | Deep Dive |
| CVE-2024-31266 | WordPress Advanced Order Export For WooCommerce plugin <= 3.4.4 - Remote Code Execution (RCE) vulnerability | AlgolPlus | Advanced Order Export For WooCommerce | Critical | 9.1 | 2024-04-25 08:43:06 | Deep Dive |
| CVE-2024-22135 | WordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload | WebToffee | Order Export & Order Import for WooCommerce | High | 8.0 | 2024-01-24 11:51:38 | Deep Dive |
| CVE-2023-47547 | WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS) | WPFactory | Products, Order & Customers Export for WooCommerce | High | 7.1 | 2023-11-14 20:45:10 | Deep Dive |
| CVE-2022-40128 | WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability | AlgolPlus | Advanced Order Export For WooCommerce (WordPress plugin) | Medium | 4.3 | 2022-11-08 18:15:18 | Deep Dive |
| CVE-2022-35275 | WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability | AlgolPlus | Advanced Order Export For WooCommerce (WordPress plugin) | Medium | 4.8 | 2022-09-09 14:39:56 | Deep Dive |