Morning for WooCommerce
Morning for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Morning for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by ParkHyunWoo. Morning for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-39723Morning for WooCommerce <= 2.4.1 - Missing Authorization
Read the full analysisVulnerability Records

Morning for WooCommerce
Author
Green Invoice
woocommerceMorning add-on (Green Invoice) for WooCommerce enables a quick, easy and convenient connection between morning’s business management system and your digital store. The connection delivers two highly important actions in one add-on: acquiring and receiving payment by credit, and automatic invoicing for each transaction. About Us Morning (Green Invoice) is Israel’s leading business management platform. Our system offers diverse convenient, user-friendly digital tools that help you better understand your business, turning administrative tasks that feel complex into fun, simple ones. For example: production of invoices, documents and financial reports, smart expense management, credit acquiring, E-commerce, automation vis-à-vis the CPA, interface with add-ons and external systems and more. In addition, morning offers rich, diverse content including a magazine, guides, a podcast and a supportive community, that together create a comprehensive, rich ecosystem for freelancers. Important to Know Morning (Green Invoice) operates in Israel and in Hebrew only.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C