Risk Free Cash On Delivery (COD) – WooCommerce

Risk Free Cash On Delivery (COD) – WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Risk Free Cash On Delivery (COD) – WooCommerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nabil Irawan. Risk Free Cash On Delivery (COD) – WooCommerce is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.2.26.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Risk Free Cash On Delivery (COD) – WooCommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-48358

Risk Free Cash On Delivery (COD) - WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Risk Free Cash On Delivery (COD) – WooCommerce banner
Latestv1.0.4

Risk Free Cash On Delivery (COD) – WooCommerce

everythingwp

Author

everythingwp

5.0(2)
100/100
Last Updated
2019-06-27 (7y ago)
Active Installs
400+
Downloads
13,700
Requires WP
3.0.1+
Requires PHP
5.2.4+
Tested up to
WP 5.2.26
Created
2018-03-01 (9y ago)

This plugin helps the E-commerce websites to prevent fake Cash on delivery (COD) orders, by collecting an advance payment which authenticates the order and approves it. An additional Extra fees option can be implemented according to the user requirements. How it works? This plug-in is to avoid the risk of Cash on Delivery (COD) orders, by enabling the advance payment option based on the user restriction category can enable or disable the COD option to the customers. The rules applied on the plugin will try to match the customer inputs and matches the requirements and shows whether the customer is available for COD or not. For Ex, If a user wants to purchase a 100k worth product, the seller will be bothered about the payment and whether the order is genuine or not, so this plug-in will help to collect a pre advance payment on the COD product so it authenticates the order. Features Basic Version Features Get Advance Payment option for cash on delivery Orders. Advance Payment customization option is based on Amount or Percentage. Extra fees collection option is available on COD orders. Enable/Disable COD feature. Text customization is accessible in the Shortcode terms. Timely Updates. Premium Version Features This Premium Plugin allows you to Restrict, Advance Payment Based on Minimum and Maximum Order Amount. Create two or more Rules to Cash on Delivery Orders. Cash on Delivery orders based on User Roles. Cash on Delivery orders based on Available Pin Codes. Cash on Delivery orders based on Country. Instant Development and Premium Support. Front End demo Back End demo Back End demo UserName : admin Password : admin About EverythingWP EverythingWP creates a unique quality WordPress/WooCommerce plug-ins that are easy to use and customize. Search Tags: cash on delivery, cod, extra fee, advance amount, restrict cash on delivery, shipping methods, smart cod, cod payment, cash on delivery payment method, woocommerce

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C