WordPress plugin
Purchase Orders for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium0
- Low0
All Purchase Orders for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Authenticated (Subscriber+) Arbitrary File Deletion ≤1.0.2Update to 1.0.3 | CVE-2025-5391 |
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
≤1.0.2Update to 1.0.3
Purchase Orders for WooCommerce: common questions
Does Purchase Orders for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Purchase Orders for WooCommerce: 1 high. None are known to affect version null.
How do I check which version of Purchase Orders for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Purchase Orders for WooCommerce vulnerability?
CVE-2025-5391, published Aug 11, 2025: WooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion. Severity: High (CVSS 8.1).
Is any Purchase Orders for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Purchase Orders for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.