WordPress plugin
WhatsOrder – Instant Checkout for WooCommerce security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All WhatsOrder – Instant Checkout for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs ≤1.0.1No patch available | CVE-2026-9612 |
- Medium5.3Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs
≤1.0.1No patch available
WhatsOrder – Instant Checkout for WooCommerce: common questions
Does WhatsOrder – Instant Checkout for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WhatsOrder – Instant Checkout for WooCommerce: 1 medium. At least one is not fixed in the latest version.
How do I check which version of WhatsOrder – Instant Checkout for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WhatsOrder – Instant Checkout for WooCommerce vulnerability?
CVE-2026-9612, published Jun 23, 2026: WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs. Severity: Medium (CVSS 5.3).
Is any WhatsOrder – Instant Checkout for WooCommerce vulnerability listed in CISA KEV?
No. None of the known WhatsOrder – Instant Checkout for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.