Quantities and Units for WooCommerce
Quantities and Units for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Quantities and Units for WooCommerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. Quantities and Units for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.
CVE-2025-58917Quantities and Units for WooCommerce <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Quantities and Units for WooCommerce
Author
Nick Verwymeren
NOTE: This plugin has been forked from the “Advanced Product Quantities” plugin. It adds decimal quantities support and units to products. Please don’t attempt to run both plugins simultaneously. It not needed and the universe will probably implode. With Quantities and Units for WooCommerce you can easily create rules that restrict the amount of products a user can buy at once. Set Minimum, Maximum and Step values for any product type and must be valid before a customer can proceed to checkout. Quantities and Units also bring decimal quantity support to WooCommerce. This plugin works great with Rapid Order, a fast ordering system for WooCommerce. New Features Allow decimal quantities (configure this in Quantity Rule -> Advanced Rule -> Site Wide Step Value) Specify a unit of measurement for the quantity (ie lbs, kg, bag etc) Features: Added Custom Quantity Message Option Added Out of Stock Min/Max Added Role Support, create rules based on user roles. Improved performance / caching Improved admin interface Allows rules to have a minimum of 0 Set a Minimum product quantity requirement Set a Maximum product quantity requirement Sell products by a desired increment ie. by two’s or the dozen Create product category based rules WooCommerce Validation rules tells users what rules they’ve broken directly on the cart or product page Set rule priority to layer multiple rules on top of each other Add your rule based input boxes to products thumbnails using WooCommerce Thumbnail Input Quantities Easily override rules on a per-product basis Integrates with WooCommerce’s Product CSV Import Suite See which rule is being applied to an individual product on your edit product page Now fully supports ALL PRODUCT TYPES, simple, variable, grouped and affiliate Create Site Wide rules that apply to every product unless overwritten on a per-product basis Create rules by Product Tags (opposed to just categories) Woocommerce +2.0 compatible
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C