Linet ERP Integration For Woocommerce
Linet ERP Integration For Woocommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Path Traversal.
Every one of the 2 issues recorded for Linet ERP Integration For Woocommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Linet ERP Integration For Woocommerce is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-31411Linet ERP-Woocommerce Integration <= 3.5.12 - Authenticated (Admin+) Arbitrary File Read & Deletion
Read the full analysisVulnerability Records

Linet ERP Integration For Woocommerce
Author
aribhour
This Plugin enables integration and sync between Linet ERP & woocommerce through Linet ERP API. The integration/sync includes: Connect woocommerce (Login) to API of Linet ERP at https://app.linet.org.il with special unique identifiers as follows: a. User unique ID b. API Key c. Company ID Automatically creates sales documents at Linet ERP upon order complition in Woocommerce estore. The auto created documents are: a. Invoice-receipt or Invoice (configurable through plugin settings), sent automaticaly by email to the client. b. Sales order for company internal use. Update Linet ERP client list with new clients created at Woocommerce. Update Woocommerce category list with new item category created at Linet ERP. Update Woocommerce items list with new items created at Linet ERP. Decrease item inventory in Linet ERP upon completed order of specific item unit/s purchased at Woocommerce estore. Update items inventory from Linet ERP to Woocommerce estore every round hour.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C