Phone Orders for WooCommerce

Phone Orders for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Phone Orders for WooCommerce has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by István Márton. Phone Orders for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh

7.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Phone Orders for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Phone Orders for WooCommerce <= 3.7.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

2 records


2022-10-24 00:00	Phone Orders for WooCommerce <= 3.7.1 - Cross-Site Request Forgery Phone Orders for WooCommerce <= 3.7.1	`N/A`	8.8 High	Anonymous	Yes
2022-10-24 00:00	Phone Orders for WooCommerce <= 3.7.1 - Missing Authorization Phone Orders for WooCommerce <= 3.7.1	`CVE-2022-41655`	6.5 Medium	István Márton	Yes

Showing 1–2 of 2 reports

Latestv3.11.0

Phone Orders for WooCommerce

Author

algol.plus

5.0(32)

100/100

Last Updated

2026-06-10 (3mo ago)

Active Installs

1,000+

Downloads

92,794

Requires WP

4.8+

Requires PHP

5.4.0+

Tested up to

WP 7.0.4

Created

2017-06-14 (9y ago)

Speeds up adding manual/phone orders in WooCommerce backend. Discount plugins correctly adjust product price too. Having created an order, you can view the order, send an invoice and complete payment of the order ( Pro version only ). Features UI was adapted for keyboard input Search through existing customers or add new customers quickly Search through existing products or add new products on the fly Use default pricing or adjust pricing within the order Places autocomplete for address (requires Google Maps API key) Support free shipping (method works in admin area only) Ability to add coupons with auto find feature Copy url to populate cart Log created orders Pro features Create new order based on existing order Pause and resume the order Separate web page for adding orders (without access to /wp-admin) Customer search by shipping/billing fields Configure fields and default values while adding new customers Setup custom fields for the order/customer Define products that can be sold (out of stock? without price?) Support composite/bundled/other complex products Add any additional fees A lot of UI options to suit different workflows and setups Extra WooCommerce reports and much more …

View on WordPress.org