Stock Sync for WooCommerce
Stock Sync for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 3 are fixed as of September 2026. Their average CVSS score is 4.9, and the most serious one scores 6.1 out of 10. 2023 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
Every one of the 3 issues recorded for Stock Sync for WooCommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Cat. Stock Sync for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-31094Stock Sync for WooCommerce <= 2.4.0 - Reflected Cross-Site Scripting via page parameter
Read the full analysisVulnerability Records
Stock Sync for WooCommerce
Author
WP Trio
Stock Sync for WooCommerce allows you to share stock quantities between two WooCommerce stores. When someone purchases a product or you set stock quantity via admin, quantity will be instantly updated to the other store. The plugin uses WooCommerce built-in API to communicate between stores. It’s as secure as WooCommerce. Features Share stock quantities between two WooCommerce stores Instantly sync stock changes when a product is purchased, refunded or edited via admin Easily view which products are being synced in the report Push all stock quantities from one store to another Background processing for preventing slowing the sites down Uses WooCommerce built-in REST API for secure communication between stores Compatible with WooCommerce 4.0 or above Pro Features Support for unlimited amount of products (WordPress.org version maximum 100 products) Support for syncing between 2 – 10 stores (WordPress.org version 2 stores) Edit stock quantities directly on the report list Email notifications about syncing errors Upgrade to Pro How to Use Please see the documentation. Support Policy If you need any help with the plugin, please create a new post on the WordPress plugin support forum. It is checked regularly but please note that response cannot be guaranteed to all issues. Priority email support is available for the Pro version. Other Useful Plugins Make sure to check out other useful plugins from the author. WooCommerce Product Sync Pro Conditional Shipping for WooCommerce Conditional Payments for WooCommerce
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C