plugin
4 known security issues reported for the Phone Orders For Woocommerce WordPress plugin. Most recent disclosed Nov 18, 2022.
Running Phone Orders For Woocommerce on your site? Check whether your installed version is affected.
Scan your site free[en] Auth. (subscriber+) Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin <= 3.7.1 on WordPress.
The Phone Orders for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing nonce validation on the ajax_gate function which controls many additional functions also missing nonce validation. This makes it possible for unauthenticated...
The Phone Orders for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_gate function which controls many additional functions also missing capability checks, in versions up to, and including, 3.7.1. This makes it possible for authenticated attackers, wi...
The Phone Orders for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.1. This is due to missing nonce validation on the ajax_gate function which controls many additional functions also missing nonce validation. This makes it possible for unauthenticated...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free