Radar sectionsPlugins & themes
Check my site

WordPress plugin

Additional Order Filters for WooCommerce security & vulnerabilities

additional-order-filters-for-woocommerce— active installsLast vulnerability Oct 6, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

4Known vulnerabilities
  • Critical0
  • High1
  • Medium3
  • Low0
Vulnerabilities per year
2023: 1 vulnerability1232024: 1 vulnerability1242025: 1 vulnerability1252026: 1 vulnerability126

All Additional Order Filters for WooCommerce vulnerabilities

Additional Order Filters for WooCommerce vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.24No patch available
CVE-2026-39800
Medium4.3Cross-Site Request Forgery
≤1.22Update to 1.23
CVE-2025-53271
Medium6.1Reflected Cross-Site Scripting
≤1.21Update to 1.22
CVE-2024-11418
Medium6.1Reflected Cross-Site Scripting
≤1.11Update to 1.12
CVE-2023-47690

Additional Order Filters for WooCommerce: common questions

Does Additional Order Filters for WooCommerce have known vulnerabilities?

Yes. VulnCrest Radar lists 4 known vulnerabilities in Additional Order Filters for WooCommerce: 1 high, 3 medium. At least one is not fixed in the latest version.

How do I check which version of Additional Order Filters for WooCommerce I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Additional Order Filters for WooCommerce vulnerability?

CVE-2026-39800, published Oct 6, 2026: Additional Order Filters for WooCommerce <= 1.24 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any Additional Order Filters for WooCommerce vulnerability listed in CISA KEV?

No. None of the known Additional Order Filters for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?