Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Admin and Customer Messages After Order for WooCommerce: OrderConvo — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Admin and Customer Messages After Order for WooCommerce: OrderConvo, with AI-generated Chinese analysis, references, and POCs.

Vendor: nmedia

CVE IDTitleCVSSSeverityPaused
CVE-2025-13389 Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure CWE-639 5.3 Medium2025-11-25
CVE-2025-13452 Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages CWE-639 4.3 Medium2025-11-25
CVE-2025-10162 OrderConvo < 14 - Unauthenticated Arbitrary File Read 7.5AIHighAI2025-10-07
CVE-2024-13355 Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting CWE-434 5.4 Medium2025-01-16

All 4 known CVE vulnerabilities affecting Admin and Customer Messages After Order for WooCommerce: OrderConvo with full Chinese analysis, references, and POCs where available.