Export Customers Data
Export Customers Data has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Export Customers Data has a vendor fix available, so running the current release closes it.
All of these findings were reported by vgo0. Export Customers Data is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-12405Export Customers Data <= 1.2.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Export Customers Data
Author
Fahad Mahmood
This plugin allows you to export WooCommerce customer data with full flexibility. Whether you need email lists, order history, customer lifetime value, or any other detail — this plugin gives you control over what to export, and how. Features: * Export customers in CSV or XLSX format * Include custom user meta fields * Support for WooCommerce Analytics fields like total_spend, orders_count, etc. * Smart field mapping (like phone, address, name) * Apply filters (date range, country, payment method, role, etc.) * Built-in support for special fields not available in user meta * Works great even with large stores using AJAX-based chunk exports Author: Fahad Mahmood Project URI: https://androidbubble.com/blog/wordpress/plugins/export-customers-data Tags woocommerce, orders, users, customers, data, export, analytics, filters, user meta License This plugin is licensed under the GNU General Public License v2 or later. You may modify and redistribute it freely, but without any warranty. See http://www.gnu.org/licenses/gpl-2.0.html for full terms.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C