Purchase Orders for WooCommerce

Purchase Orders for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Path Traversal, behind 1 of the records (100%).

The one issue recorded for Purchase Orders for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by CVE_hunter. Purchase Orders for WooCommerce is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSHigh
8.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Purchase Orders for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2025-5391

WooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion

Read the full analysis

Vulnerability Records

1 records
Purchase Orders for WooCommerce banner
Latestv1.0.4

Purchase Orders for WooCommerce

Ahmad Wael

Author

Ahmad Wael

5.0(2)
100/100
Last Updated
2025-09-16 (1y ago)
Active Installs
40+
Downloads
1,667
Requires WP
4.7+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2023-11-06 (3y ago)

Purchase Orders for WooCommerce is a plugin that seamlessly integrates with WooCommerce, empowering your store to accept purchase orders as a payment method. This plugin creates a new payment gateway that facilitates the submission of purchase orders by allowing customers to upload necessary document files. Shop managers can then review the uploaded documents and approve the order, streamlining the purchasing process. The uploaded documents are accessible on the order page in the customer profile, admin order pages, and are included in order detail emails. This plugin is compatible with WooCommerce versions greater than 3.0, ensuring a smooth and efficient integration with the latest WooCommerce features and updates. Features Introduces a purchase order payment gateway in WooCommerce. Allows customers to upload document files for purchase orders. Securily storing files. Enables shop managers to review and approve orders. Select users that will be able to use the purchase orders. Documents are accessible on order pages, customer profiles, and in order detail emails. Compatibility with WooCommerce versions greater than 3.0. Development This plugin is open source, and you can contribute to its development on GitHub. License This plugin is licensed under the GNU General Public License v2 or later. Contact For any inquiries, issues, or suggestions, please contact Ahmad Wael: – Twitter: @devwael – Hire me on Codeable: Ahmad Wael on Codeable – Get to know Ahmad Wael: YouTube – Meet Ahmad Wael – Website: bbioon.com Credits This plugin was created by Ahmad Wael, inspired by the needs of WooCommerce stores requiring purchase order functionalities.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C