Additional Order Filters For Woocommerce Vulnerabilities

The Additional Order Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.24. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

CVSS:

7.2

(Wordfence)

Affected:

up to 1.24

Fix:

No patched version reported

Disclosed:

Oct 6, 2026

CVE-2026-39800 on NVD →

The Additional Order Filters for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.22. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted the...

CVSS:

4.3

(Wordfence)

Affected:

up to 1.22

Fixed in:

1.23

Disclosed:

Jun 27, 2025

CVE-2025-53271 on NVD →

The Additional Order Filters for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shipping_method_filter' parameter in all versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVSS:

6.1

(Wordfence)

Affected:

up to 1.21

Fixed in:

1.22

Disclosed:

Nov 25, 2024

CVE-2024-11418 on NVD →

The Additional Order Filters for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the PHP_SELF in versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pa...

CVSS:

6.1

(Wordfence)

Affected:

up to 1.11

Fixed in:

1.12

Disclosed:

Nov 9, 2023

CVE-2023-47690 on NVD →