WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection

WordPress Order Listener for WooCommerce plugin before 3.2.2 contains a SQL injection vulnerability. The plugin does not sanitize and escape the id parameter before using it in a SQL statement via a REST route. An attacker can possibly obtain sensitive information, modify data, and/or execute...

CVE-2025-68018

Missing Authorization vulnerability in StackWC Order Listener for WooCommerce woc-order-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Listener for WooCommerce: from n/a through = 3.6.1...

PT-2026-4061

Name of the Vulnerable Software and Affected Versions ilmosys Order Listener for WooCommerce versions through 3.6.1 Description The software contains a flaw related to incorrectly configured access control security levels, leading to a missing authorization issue. This allows for exploitation of...