plugin
5 known security issues reported for the Woocommerce Anti Fraud WordPress plugin. Most recent disclosed Jun 8, 2026.
Running Woocommerce Anti Fraud on your site? Check whether your installed version is affected.
Scan your site freeThe WooCommerce Anti-Fraud plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 7.2.6. This makes it possible for unauthenticated attackers to perform an unauthorized action.
The WooCommerce Anti-Fraud plugin for WordPress is vulnerable to Insecure Direct Object Reference (IDOR) due to insufficient user validation on the paypal_verification() function in versions up to, and including, 3.2. This makes it possible for unauthenticated attackers to change any user's order status.
Unauthenticated order status manipulation issue found by Brian Henry in WordPress WooCommerce Anti-Fraud premium plugin (versions <= 3.2).
The WooCommerce Anti-Fraud plugin for WordPress is vulnerable to Insecure Direct Object Reference (IDOR) due to insufficient user validation on the paypal_verification() function in versions up to, and including, 3.2. This makes it possible for unauthenticated attackers to change any user's order status.
The plugin is affected by an issue where an unauthenticated user could change the order status of any order to processing, as there were no checks when changing the order status. The order_id was also predictable. On an individual level, if you have already received your order, you can set the order status back to P...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free