Additional Order Filters for WooCommerce

Additional Order Filters for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 3 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 5.9, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

4 independent researchers contributed these findings, one record each. Additional Order Filters for WooCommerce is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.10.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage75%
Open

1

Fixed

3

Get automatic notifications for all Additional Order Filters for WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-39800

Additional Order Filters for WooCommerce <= 1.24 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
Additional Order Filters for WooCommerce banner
Latestv1.24

Additional Order Filters for WooCommerce

Anton Bond

Author

Anton Bond

5.0(6)
100/100
Last Updated
2025-12-09 (11mo ago)
Active Installs
2,000+
Downloads
24,772
Requires WP
6.2+
Requires PHP
7.0+
Tested up to
WP 6.9.10
Created
2017-09-29 (9y ago)

Additional Order Filters for WooCommerce adds additional filters, with which you can easily and quickly find the orders you need among hundreds of others. Plugin allows you to search by next filters: Order Statuses Payment Method Customer Group Shipping Method Customer details (email, name, phone, etc) Customer Billing Country Track Number SKU number Date Range Order price total You also can set your own custom order filters based on order meta fields. This can be any order field, including other plugins. Fully support High-Performance Order Storage of WooCommerce. Support for the previous version of orders (WordPress posts storage (legacy)) also remains. Absolutely free. Let’s try it!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C