Notiqoo – Order Notification & Customer Chat for WooCommerce
Notiqoo – Order Notification & Customer Chat for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Notiqoo – Order Notification & Customer Chat for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Seongwon Lee. Notiqoo – Order Notification & Customer Chat for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.
CVE-2026-19840Notiqoo – Order Notification & Customer Chat for WooCommerce < 1.4.14 - Missing Authorization to Authenticated (Contributor+) Arbitrary Option Modification
Read the full analysisVulnerability Records

Notiqoo – Order Notification & Customer Chat for WooCommerce
Author
Sarankumar
woocommerceNotiqoo is a powerful WooCommerce WhatsApp automation plugin that connects your store with the official WhatsApp Cloud API. Send automated order notifications, recovery messages, support updates, and marketing campaigns while keeping customers engaged on the messaging platform they use every day. 👉 Notiqoo Pro 👉 Documentation 👉 Live Demo 👉 Video Guides 👉 Support Important: Dedicated phone number required The standard setup requires a dedicated phone number registered with the WhatsApp Business Platform and not connected to the WhatsApp mobile apps. Calls and SMS may still work. Number coexistence depends on Meta eligibility and integration support. Read WhatsApp Cloud API phone number requirements. Want to test Notiqoo without using your production WhatsApp number? Try a virtual phone number for WhatsApp Business. Notiqoo Free features Notiqoo Free supports WooCommerce order notifications, status updates, manual message triggers, configurable templates, and supported abandoned cart messaging. Feature availability depends on your configuration and WhatsApp requirements. Notiqoo Pro — 10 powerful features Automate WooCommerce WhatsApp messaging, recover abandoned carts, verify orders, and improve customer engagement. 1. Recover Abandoned Carts Send automated cart reminders with configurable delays and supported coupon workflows. 2. Order & Shipping Notifications Send WooCommerce order status, shipping, and delivery updates using WhatsApp templates. 3. WhatsApp Login & Signup Enable customer login and registration with WhatsApp OTP verification. 4. COD Order Verification Verify Cash on Delivery orders using WhatsApp OTP to help reduce fake orders and return-to-origin costs. 5. Broadcast Promotions & Offers Send approved template campaigns for promotions, offers, launches, and restock alerts, with audience selection and scheduling. 6. Collect Product Reviews Request product reviews through WhatsApp, including supported photo and video submissions. 7. WhatsApp Customer Support Manage two-way conversations, shared inboxes, quick replies, labels, and notes from WordPress. 8. Lead Generation on WhatsApp Generate leads with Click-to-Chat links, QR codes, chat widgets, and supported checkout opt-ins. 9. Catalog & Product Sharing Share WooCommerce products and supported catalog items through WhatsApp. 10. Forms → WhatsApp Receive form notifications from Contact Form 7, WPForms, Fluent Forms, and Gravity Forms. Explore all Notiqoo Pro features Official WhatsApp Business Platform Configure your own Meta business assets, WhatsApp Business Account, phone number, credentials, and message templates. Messaging is subject to Meta policies, approval requirements, account eligibility, limits, and applicable charges. Extend Notiqoo Pro with add-ons like Notiqoo Teams for shared WhatsApp inboxes and team collaboration, and Notiqoo Automator for automated WooCommerce WhatsApp notifications. Disclaimer: All trademarks and brand names belong to their respective owners. Notiqoo is not affiliated with or endorsed by WhatsApp
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C