plugin
23 known security issues reported for the Woocommerce Exporter WordPress plugin. Most recent disclosed Nov 6, 2025.
Running Woocommerce Exporter on your site? Check whether your installed version is affected.
Scan your site free[en] Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through <= 2.7.6.
The Store Exporter plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7.6. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access contr...
[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach WooCommerce – Store Exporter allows Reflected XSS. This issue affects WooCommerce – Store Exporter: from n/a through 2.7.4.
The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject a...
[en] The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes it possible for...
The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.7.2.1. This makes it possible for unaut...
[en] Unauth. Reflected Cross-Site Scripting') vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin <= 2.7.2 versions.
The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'filter' parameter in all versions up to, and including, 2.7.2 due to insufficient input sanitization and output escaping. This makes it possib...
The Store Exporter for WooCommerce – Export Products, Export Orders, Export Subscriptions, and More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'filter' parameter in all versions up to, and including, 2.7.2 due to insufficient input sanitization and output escaping. This makes it possib...
[en] The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.
The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.
The WooCommerce - Store Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 2.3.1 via the Quick Export' functionality. This allows authenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and o...
The WooCommerce - Store Exporter plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 2.3.1 via the Quick Export' functionality. This allows authenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and o...
CSV Injection vulnerability found by Vishnupriya Ilango (FortiGuard Labs) in WordPress WooCommerce - Store Exporter plugin (versions <= 2.3.1).
[en] The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation.
The WooCommerce – Store Exporter plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the woo_ce_admin_init function hooked via 'init' in versions up to, and including 1.8.3. This makes it possible for unauthenticated attackers to perform actions like exporting data that may c...
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.
The WooCommerce – Store Exporter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'export_filename' parameter in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts t...
The WooCommerce Store Exporter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' & 'dataset' parameters in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
The WooCommerce – Store Exporter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'export_filename' parameter in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts t...
The WooCommerce Store Exporter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' & 'dataset' parameters in versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...
A CSV Injection vulnerability was discovered in WooCommerce - Store Exporter v 2.3.1. It allows a user with low level privileges to inject a command that will be included in the exported CSV file, leading to possible command/code execution.
The WooCommerce – Store Exporter WordPress plugin was affected by a Cross Site Scripting (XSS) security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free