Scheduled & Automatic Order Status Controller for WooCommerce
Scheduled & Automatic Order Status Controller for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Open Redirect, behind 1 of the records (100%).
The one issue recorded for Scheduled & Automatic Order Status Controller for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Le Ngoc Anh. Scheduled & Automatic Order Status Controller for WooCommerce is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-30781Scheduled & Automatic Order Status Controller for WooCommerce <= 3.7.1 - Open Redirect
Read the full analysisVulnerability Records

Scheduled & Automatic Order Status Controller for WooCommerce
Author
WPFactory
woocommerceScheduled & Automatic Order Status Controller for WooCommerce plugin lets you schedule automatic WooCommerce order status changes. For example: automatically change order status to cancelled, when 24 hours have passed since order status was set to pending. ✅ Order Status Rule Options Order status from. Order status to. Time trigger (in seconds, minutes, hours, days or weeks). Minimum and maximum order amount and order quantity. Required payment gateways. Required shipping methods. Required billing and shipping countries. Required products, product categories, product tags or product stock status. Required users, user roles or billing emails. Required coupons. And more… 🤝 Compatibility High-Performance Order Storage (HPOS). WooCommerce Subscriptions plugin. 🗘 Feedback We are open to your suggestions and feedback. Thank you for using or trying out one of our plugins! Visit plugin site.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C