Order Notification for WooCommerce vulnerabilities
We track 1 vulnerability in Order Notification for WooCommerce products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 1, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Order Notification for WooCommerce vulnerabilities
- 9.1 Critical severity
Order Notification for WooCommerce: Improper Authentication
The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, enabling complete read/write access to store resources like products, coupons, and customers.