Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup

Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 5 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 5 issues recorded for Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

5

Get automatic notifications for all Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-2841

Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection

Read the full analysis

Vulnerability Records

5 records
Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup banner
Latestv1.9.4

Advanced Local Pickup for WooCommerce – Click & Collect, In-Store Pickup

Zorem

Author

Zorem

4.7(55)
94/100
Last Updated
2026-10-22 (6d ago)
Active Installs
3,000+
Downloads
165,286
Requires WP
5.5+
Requires PHP
7.0+
Tested up to
WP 7.1.3
Created
2020-04-21 (7y ago)
Requires Plugins
woocommerce

Manage in-store pickups, notify customers, and streamline every order — from one place. Advanced Local Pickup for WooCommerce (ALP) extends WooCommerce’s default Local Pickup shipping method into a full click-and-collect fulfillment workflow — with dedicated order statuses, automated customer notifications, and customizable pickup instructions. Out of the box, WooCommerce Local Pickup has no way to tell customers their order is ready for collection, no pickup-specific order status, and no mechanism to share pickup instructions. This plugin fixes all of that, giving you and your customers a clear, professional pickup experience from order placement to collection. HPOS Compatible · 3,000+ Active Stores · Free & Open Source How It Works A customer places an order and selects Local Pickup at checkout. You prepare the order and mark it as Ready for Pickup — the customer instantly receives an email with pickup instructions, location details, and store hours. The customer collects their order. You mark it as Picked Up — optionally sending a final confirmation email. No complex setup. Works with your existing WooCommerce Local Pickup configuration. What’s Included in the Free Version “Ready for Pickup” order status — A dedicated status that triggers an automatic email notification to the customer, letting them know their order is ready for collection. “Picked Up” order status — A second status to confirm collection, with an optional confirmation email. Automated email notifications — Emails fire automatically when you change the order status — no manual messaging needed. Customizable email content — Modify the subject line, heading, and body content of both pickup status emails from the WooCommerce email customizer. Pickup location setup — Add your store name, address, opening hours, and special pickup instructions. These appear automatically in the Ready for Pickup email. Pickup instructions in the Processing email — Optionally show pickup details in the initial order confirmation email so customers know what to expect right away. Pickup instructions on the Thank You page — Display pickup instructions on the order received page immediately after checkout. Bulk order actions — Change multiple orders to Ready for Pickup or Picked Up in bulk from the WooCommerce orders list. HPOS Compatible — Fully compatible with WooCommerce High-Performance Order Storage. Free vs PRO — What’s the Difference? The free version covers single-location pickup workflows. ALP PRO is a complete BOPIS fulfillment system — multiple locations, curbside pickup, appointment scheduling, QR code handoff and a fulfillment dashboard. ALP Free includes: Ready for Pickup and Picked Up custom order statuses Automated email notifications for both statuses Single pickup location with name, address, hours, and instructions Customizable email content (subject, heading, body) Pickup instructions on Thank You page and Processing email Bulk order status actions HPOS compatible ALP PRO adds: Multiple pickup locations — Add and manage unlimited pickup points, each with its own address, hours, instructions and contact details. Curbside pickup mode — Enable curbside per location. Customers choose curbside at checkout and enter their vehicle make, colour and licence plate, then tap “I’ve Arrived” when they pull up — your staff are notified in real time. QR code pickup handoff — Every pickup order generates a unique QR code in the customer’s order confirmation. Staff scan it to confirm collection. Mobile admin scanner — Scan pickup QR codes from any phone, with a full audit trail of timestamp, staff member and location. Fulfillment dashboard with Today’s Pickup Board — A dedicated “Today” tab showing every pickup scheduled for the current day. Pickup appointment scheduling — Let customers reserve a date and time slot at checkout, with configurable slot lengths (15, 30 or 60 minutes) per location. Per-location business hours and holiday blackouts — Different opening hours for each day of the week, plus closure dates, per location. Per-location inventory control — Offer pickup only where the item is actually in stock. Map-based pickup location selector — An interactive map with a pin for each location and Google’s “Use My Location” support. Google Maps integration — Sort pickup locations by distance from the customer’s address. Restrict pickup locations by product or category — Assign specific products or categories to specific pickup locations only. Per-location pickup fees or discounts — Charge or discount per location to steer demand between stores. Mixed pickup + shipping orders — Some items collected in store and others shipped, in the same order. Per-item pickup location — Different items in one order collected from different locations, each with its own appointment. Customers can change pickup after ordering — Customers update their pickup location or appointment time through a secure link, without raising a support ticket. Force local pickup — Make local pickup the only available shipping method for specific products or categories. Display pickup availability messages — Show customers when pickup is available before they reach checkout. Automated pickup notifications by email and SMS — Status notifications fire automatically at every step of the pickup workflow. Location-specific email notifications — Ready for Pickup emails sent from the location handling the order, with that location’s details. WooCommerce Block Checkout support — Full support for the WooCommerce Checkout Block. Custom email templates — Advanced pickup email styling and layout customization. Priority support — Faster, dedicated assistance from the Zorem team. 👉 Get ALP PRO Who Uses Advanced Local Pickup Any WooCommerce store that lets customers collect their orders in person: Restaurants, cafés and bakeries — run order-ahead and collection without handing margin to a third-party delivery app. Grocery stores, butchers and farm shops — let customers reserve fresh stock online and collect the same day. Breweries, wineries and bottle shops — age-restricted goods that have to be handed over in person. Florists and gift shops — same-day collection for time-sensitive orders. Pharmacies and health stores — product collection with a clear ready-for-pickup notification. Bike shops, hardware stores and garden centres — bulky items customers would rather collect themselves. Clothing and footwear boutiques — reserve online, try in store. Electronics and hobby retailers — high-value items customers prefer not to risk in transit. BOPIS and ship-from-store retailers — buy online, pick up in store, on top of your existing WooCommerce setup. Compatible With Advanced Local Pickup is tested and compatible with: Email customizers — Kadence WooMail, YayMail, WP HTML Mail SMS notifications — SMS for WooCommerce Multilingual — WPML (special instruction text translatable) Page builders — Elementor, Divi Subscriptions — WooCommerce Subscriptions (pickup instructions in renewal emails) Multi-vendor — Dokan, WCFM Marketplace Full compatibility list → Translations Advanced Local Pickup is fully translatable. Current translations include English, German, Spanish, French, Hebrew, Italian, and Danish. Translate into your language → Documentation & Support 📖 Full documentation and setup guides 💬 WordPress.org support forum More Plugins by Zorem Advanced Shipment Tracking for WooCommerce — The #1 WooCommerce shipment tracking plugin. Trusted by 70,000+ stores. SMS for WooCommerce — Automated SMS order and shipping notifications via Twilio, WhatsApp, and 18 other providers. Zorem Returns — Self-service returns, exchanges, and store credit management for WooCommerce. Customer Email Verification PRO — Block fake accounts and spam orders with OTP-based email verification. Country Based Restrictions PRO — Restrict products and payment gateways by customer country using WooCommerce geolocation. Explore the full catalog at zorem.com →

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C