Accounting for WooCommerce

Accounting for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include PHP Remote File Inclusion.

Every one of the 3 issues recorded for Accounting for WooCommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Accounting for WooCommerce is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.8/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Accounting for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-30835

Accounting for WooCommerce <= 1.6.8 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

3 records
Accounting for WooCommerce banner
Latestv1.6.12

Accounting for WooCommerce

Bastien Ho

Author

Bastien Ho

3.7(3)
74/100
Last Updated
2026-06-02 (3mo ago)
Active Installs
500+
Downloads
12,918
Requires WP
5.3+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2021-01-14 (6y ago)
Requires Plugins
woocommerce

Define global codes for each type of data: products, taxes, shipping fees, payment methods, account number, analytic. You can export your orders in a CSV file, filtered by date and status, set columns and separators so every common Accounting Software. At this time, tested on : CIEL, Cogilog, EBP Accounting, GNUcash With the PRO addon, you will be able to set accounting number and analytic code for each item of: products, taxes, shipping fees and payment methods. Try out this plugin on our demo site to see how it works. Features in free version Define global codes (account number and analytic) for each type of data: products, taxes, shipping fees, payment methods, customers Define which order status you want to export Export accounting in CSV file Custom date format Custom separator Custom decimal separator Features added by PRO addon All free version features plus: Define accounting number and analytic code for each item of: products, taxes, shipping fees and payment methods Define accounting number for each customers Support invoice number from WooCommerce PDF Invoices & Packing Slips Mark orders as exported Moreover, you can add the bank slips generated by Bank Slip for WooCommerce (free) in your exports with the Bank Reconcilation addon. This plugin is a fork from WooCommerce Book-keeper with a huge refactor by NOUS Ouvert Utile et Simple.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C