WordPress plugin
FastPicker, an order picker and order management system (oms) for WooCommerce on steroids security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All FastPicker, an order picker and order management system (oms) for WooCommerce on steroids vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery via Settings Save ≤1.0.2No patch available | CVE-2026-8904 |
- Medium4.3Cross-Site Request Forgery via Settings Save
≤1.0.2No patch available
FastPicker, an order picker and order management system (oms) for WooCommerce on steroids: common questions
Does FastPicker, an order picker and order management system (oms) for WooCommerce on steroids have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in FastPicker, an order picker and order management system (oms) for WooCommerce on steroids: 1 medium. At least one is not fixed in the latest version.
How do I check which version of FastPicker, an order picker and order management system (oms) for WooCommerce on steroids I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent FastPicker, an order picker and order management system (oms) for WooCommerce on steroids vulnerability?
CVE-2026-8904, published Jun 8, 2026: FastPicker, an order picker and order management system (oms) for WooCommerce on steroids <= 1.0.2 - Cross-Site Request Forgery via Settings Save. Severity: Medium (CVSS 4.3).
Is any FastPicker, an order picker and order management system (oms) for WooCommerce on steroids vulnerability listed in CISA KEV?
No. None of the known FastPicker, an order picker and order management system (oms) for WooCommerce on steroids vulnerabilities is currently listed in the CISA KEV catalog.