Ni WooCommerce Custom Order Status

Ni WooCommerce Custom Order Status has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is SQL Injection, behind 1 of the records (100%).

The one issue recorded for Ni WooCommerce Custom Order Status has a vendor fix available, so running the current release closes it.

All of these findings were reported by ZhongFu Su. Ni WooCommerce Custom Order Status is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh
8.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Ni WooCommerce Custom Order Status vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-24846

Ni WooCommerce Custom Order Status <= 1.9.6 - SQL Injection

Read the full analysis

Vulnerability Records

1 records
Ni WooCommerce Custom Order Status banner
Latestv2.2.8

Ni WooCommerce Custom Order Status

Anzar Ahmed

Author

Anzar Ahmed

4.1(16)
82/100
Last Updated
2026-09-10 (3d ago)
Active Installs
2,000+
Downloads
80,368
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2015-10-27 (11y ago)
Requires Plugins
woocommerce

Ni WooCommerce Custom Order Status lets you create, edit, color-code and delete unlimited custom order statuses for WooCommerce, automatically send a custom order status email to the customer whenever an order moves to one of your statuses, and analyse your store with a built-in order status report and sales dashboard. Out of the box WooCommerce ships with a fixed set of order statuses (pending, processing, on-hold, completed, cancelled, refunded, failed). Most stores need more, for example “Awaiting Shipment”, “Packing”, “Ready for Pickup”, “Out for Delivery” or “Quote Sent”. This plugin adds an Order Status manager to your WordPress admin so you can model your real order fulfilment workflow without writing a single line of code. The plugin is fully compatible with the WooCommerce High-Performance Order Storage (HPOS) feature as well as the legacy post-based order storage. Key features Create unlimited WooCommerce custom order statuses Edit, rename and delete custom order statuses at any time Assign a color to every order status so it stands out in the WooCommerce orders list Add an internal description to each order status Custom, editable order status slug Custom statuses appear on the single order screen, in the order status dropdown and in the order status filter Bulk change order status from the WooCommerce orders list (HPOS compatible) One-click “Complete” action for orders that are in a custom order status Custom order status email &ndash; enable or disable per status, with its own subject line and message, sent automatically when the order status changes Order Status Report &ndash; order count and order total per status, filter by period (today, yesterday, last 7 / 15 / 30 / 60 / 90 days) and sort by status, order total or order count Sales dashboard &ndash; total, yearly, monthly, weekly, yesterday and today sales and order counts Customer analysis, top 5 customers, top 5 countries, payment gateway sales breakdown and stock analysis Developer friendly &ndash; filters to customise the order status email subject and content Works with WooCommerce HPOS and legacy order storage Lightweight, translation ready and easy to use Why use custom order statuses in WooCommerce? Custom order statuses give you and your team an instant overview of where every order is in your process. They reduce fulfilment mistakes, improve customer communication through targeted order status emails, and let you filter and report on orders by the stages that actually matter to your business. How the custom order status email works Every custom order status has its own “Enable Email Send” option, subject line and email content. When an order changes to that status, the plugin sends the message to the customer’s billing email address using the store’s configured “from” name and address. Developers can adjust the subject and body with the ni_custom_order_status_email_subject and ni_custom_order_status_email_content filters. How to get started Go to Plugins > Add New in your WordPress dashboard. Search for “Ni WooCommerce Custom Order Status”. Click Install Now, then Activate. Open the new Order Status menu and click Add New to create your first custom order status, set its color and (optionally) its status email. Support and feedback We are open to your suggestions and feedback &ndash; thank you for using one of our plugins. For help or feature requests, email support@naziinfotech.com. Disclaimer It is not responsible for any harm or wrong doing this Plugin may cause. Users are fully responsible for their own use. This Plugin is to be used WITHOUT warranty.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C