WPC Order Notes for WooCommerce
WPC Order Notes for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for WPC Order Notes for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by vgo0. WPC Order Notes for WooCommerce is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-12004WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

WPC Order Notes for WooCommerce
Author
WPClever
woocommerceWPC Order Notes for WooCommerce is an easy tool for store owners to manage all order notes. It offers a quick preview of added notes in each order from the popup. It lists all the notes with paging and provides the search function for finding the needed detail quickly. WPC Order Notes for WooCommerce makes life easier for store managers by reducing the time needed for organizing notes, checking orders to find the latest activity, or navigating back and forth to check the progress during the package delivery. Features List all notes with paging Add quick notes to quickly select Search for matching notes in the Notes section Preview the latest notes from the Orders section Quick view all notes of an order from the popup Add/ edit/ delete a note on the quick view popup Not what you needed? Please try other plugins from us: WPC Product Bundles WPC Composite Products WPC Grouped Product WPC Frequently Bought Together WPC Force Sells
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C