Email Attachment by Order Status & Products

Email Attachment by Order Status & Products has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Email Attachment by Order Status & Products has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Martino Spagnuolo. Email Attachment by Order Status & Products is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Email Attachment by Order Status & Products vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-49957

Email Attachment by Order Status & Products <= 1.0.1 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-07-14 00:00	Email Attachment by Order Status & Products <= 1.0.1 - Reflected Cross-Site Scripting Email Attachment by Order Status… <= 1.0.1	`CVE-2025-49957`	6.1 Medium	Martino Spagnuolo	No

Showing 1–1 of 1 reports

Latestv1.0.1

Email Attachment by Order Status & Products

Author

Weboccult Technologies Pvt Ltd

0.0(0)

0/100

Last Updated

2025-06-12 (1y ago)

Active Installs

50+

Downloads

1,464

Requires WP

6.2+

Requires PHP

7.0+

Tested up to

WP 6.8.8

Created

2022-05-30 (4y ago)

Email Attachment by Order Status & Products allow admin to send custom attachment to their customers when woocommerce status change notification email triggered It provide admin facility to send product related information to their users after placed order like product manual or how to use product. It also useful for booking type product to send pdf or document to users to provide accommodation and rules about their booking. FEATURES It allows admin to add one more attachment for order status. It allows admin to add attachment by product type. It allows admin to add attachment to single or multiple products. It allow to add attachment by different languages when WPML is active. STEPS TO USE You have to add one or more attachment and order status you want to send attachment. You can select product type or single product or multiple product option to add attachment for your specific need. Upload attachment from media library

View on WordPress.org