CyberSecBulletin

StackWC vulnerabilities

We track 2 vulnerabilities in StackWC products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2026.

2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score

Latest StackWC vulnerabilities

  • 9.4 Critical severity

    Order Listener for WooCommerce: Missing Authorization

    CVE-2025-68018StackWC

    Missing Authorization vulnerability in StackWC Order Listener for WooCommerce woc-order-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Listener for WooCommerce: from n/a through <= 3.6.1.

  • 8.8 High severity

    Open Close WooCommerce Store: Path Traversal: '.../...//'

    CVE-2025-47649StackWC

    Path Traversal: '.../...//' vulnerability in StackWC Open Close WooCommerce Store woc-open-close allows PHP Local File Inclusion.This issue affects Open Close WooCommerce Store: from n/a through <= 4.9.9.