Skip to content
OpenAdvisories

Vendor

anzia

3 known vulnerabilities.

Products

Ni WooCommerce Customer Product Report 1 Ni WooCommerce Order Export 1 Ni Sales Commission For WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-4140

    Ni WooCommerce Order Export <= 3.1.6 - Cross-Site Request Forgery to Settings Update via ni_order_export_action AJAX Action

    The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6. This is due to missing nonce validation in the ni_order_export_action() AJAX handler function. The handler processes se…

    anzia Ni WooCommerce Order Export Web / CMS
  • Medium 4.3
    CVE-2025-7827

    Ni WooCommerce Customer Product Report <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update

    The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ni_woocpr_action() function in all versions up to, and including, 1.2.4. This makes it possible for aut…

    anzia Ni WooCommerce Customer Product Report Web / CMS
  • Medium 4.3
    CVE-2024-13424

    Ni Sales Commission For WooCommerce <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Commission Update

    The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwoosc_ajax' AJAX endpoint in all versions up to, and including, 1.2.4. This makes it possible for authenticated attac…

    anzia Ni Sales Commission For WooCommerce Web / CMS