Bulk Order Form for WooCommerce
Bulk Order Form for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 5.5 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Bulk Order Form for WooCommerce has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Emili Castells. Bulk Order Form for WooCommerce is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2023-34170Quick/Bulk Order Form for WooCommerce <= 3.5.7 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Bulk Order Form for WooCommerce
Author
WP Overnight
This plugin helps you sell more by letting you add a Bulk/Quick Order Form for WooCommerce to your website in seconds! All you have to do is add the [wcbulkorder] shortcode to a page and you already have a quick order form! More information on setting up the plugin can be found in our documentation here: Bulk Order Form shortcode The shortcode is extremely customizable and includes the following awesome features: Let user search by product id, title, or sku Turn price fields on/off Set default number of rows Set title for product input field column Set title for quantity input field column Set title for price input field column Price totals are calculated in real time Disable jquery ui css or add your own Include specific products or variations by id Exclude specific products or variations by id Include only specific categories Display product images in autocomplete search Limit user to be able to search only by product id, title, sku, or allow them to search all. 4 additional search label output formats Add New Row button so the customer can add additional fields as needed Create as many forms as you want and customize them with shortcode attributes
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C