Japanized for WooCommerce

Japanized for WooCommerce has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 7 are fixed as of October 2026. Their average CVSS score is 5.6, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (43%). Other recurring categories include Cross-Site Scripting, Cross-Site Request Forgery (CSRF).

Every one of the 7 issues recorded for Japanized for WooCommerce has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, one record each. Japanized for WooCommerce is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

7

Get automatic notifications for all Japanized for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2023-47698

Japanized For WooCommerce <= 2.6.4 - Missing Authorization

Read the full analysis

Vulnerability Records

7 records
Japanized for WooCommerce banner
Latestv2.9.20

Japanized for WooCommerce

shohei.tanaka

Author

shohei.tanaka

3.3(21)
66/100
Last Updated
2026-10-22 (6d ago)
Active Installs
10,000+
Downloads
599,480
Requires WP
6.7+
Requires PHP
8.3+
Tested up to
WP 7.1.3
Created
2014-06-22 (13y ago)
Requires Plugins
woocommerce

Japanized for WooCommerce is the essential toolkit for running a WooCommerce store in Japan. This plugin bridges the gap between WooCommerce’s global features and Japan’s unique e-commerce requirements. Why You Need This Plugin Running an online store in Japan requires specific features that standard WooCommerce doesn’t provide out of the box: * Japanese address formats with proper field ordering (postal code, prefecture, city, address lines) * Name reading fields (Yomigana/Furigana) for accurate customer identification * Delivery date and time selection that customers expect * Popular Japanese payment methods like bank transfer and COD * Legal compliance with Japan’s Specified Commercial Transaction Act (特定商取引法) Who Should Use This This plugin is designed for: * Japanese e-commerce businesses using WooCommerce * International stores shipping to Japanese customers * Anyone who needs Japanese address handling and payment methods * Stores requiring delivery date/time selection functionality Seamless Integration Works smoothly with WooCommerce core features and popular extensions. Fully compatible with the new WooCommerce Blocks checkout experience. All features are optional – enable only what you need for your store. Key Features Address & Name Management * Name reading (Yomigana/Furigana) input fields for billing and shipping addresses * Honorific title (様/sama) automatically added after customer names * Japanese-style address format with proper field ordering * Auto-fill address from postal code using Yahoo! API integration * Company name field support Shipping & Delivery * Delivery date and time selection at checkout * Delivery time slot management * Holiday and non-delivery day settings * Weekend and specific date exclusions * Delivery-related fields hidden when free shipping is applied Payment Methods * Bank Transfer (Japanese banks) * Japan Post Bank Transfer * Cash on Delivery (COD) with fee calculation * COD subscription support * Pay at Store (over-the-counter payment) * Paidy (Buy Now, Pay Later) – Official Japanese payment gateway Legal & Compliance * Specified Commercial Transaction Act (特定商取引法) page creator * Shortcode support for legal information display * Customizable legal notice templates Additional Features * Email template optimization for Japanese format * Address validation for Japanese postal codes * Affiliate integration (A8.net, Access Trade, Value Commerce) * WooCommerce Blocks compatibility Note: Paidy Checkout is also available as a standalone payment plugin. External Services This plugin connects to the following third-party services: Yahoo! Japan Web API (yahoo.co.jp) — used by the postal-code auto-fill feature to look up a Japanese address from a postal code entered at checkout. The postal code is sent to Yahoo! Japan’s address lookup API whenever a customer uses this feature; it uses a merchant-configured Application ID (Japan Settings → Address Form) if one is set, and a bundled shared ID otherwise, so it is active whenever the postal-code auto-fill feature itself is used, not only once an ID is configured. See Yahoo! Japan’s own site for their terms of service and privacy policy. Paidy payment API (api.paidy.com) — used by the Paidy (Buy Now, Pay Later) payment gateway to process and verify payments. Only active when the Paidy gateway is enabled. See Paidy’s own site for their terms of service and privacy policy. Artisan Workshop Paidy onboarding intermediary (paidy.artws.info) — used only while applying for a Paidy merchant account through this plugin’s setup wizard (available even before the gateway is enabled, since onboarding is how it becomes eligible to be enabled). Submitting the application form sends the store’s site name and URL, the merchant’s contact details (email, phone), the representative’s name and date of birth, the submitted screening survey answers, and a site-specific verification hash, to this Artisan Workshop-operated intermediary, which relays the application to Paidy and later delivers the issued API credentials back to the site. Artisan Workshop promotion service (wc.artws.info) — the plugin’s own first-party service. It is contacted automatically (no setting to disable it) to fetch promotional notice content shown in the WordPress admin dashboard to users who can manage WooCommerce, on stores with at least one order placed in the last 5 days. No order, customer, or site-configuration data is sent or received beyond the request itself.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C