Skip to content
OpenAdvisories

Vendor

vanquish

22 known vulnerabilities.

Products

WooCommerce Support Ticket System 5 User Extra Fields 4 WordPress User Extra Fields 4 WooCommerce Orders & Customers Exporter 3 Upload Files Anywhere 2 WooCommerce File Approval 1 WooCommerce Order Details 1 WooCommerce Customers Manager 1 WooCommerce Bulk Product Editor 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-67579

    WordPress User Extra Fields plugin <= 16.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Extra Fields: from n/a through <= 16.8.

    vanquish User Extra Fields
  • Medium 6.5
    CVE-2025-53424

    WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through …

    vanquish WooCommerce Orders & Customers Exporter Web / CMS
  • Medium 5.4
    CVE-2024-13775

    WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure

    The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajax_delete_message', 'ajax_get_customers_partial_list', and 'ajax_get_admins_list' functions in all vers…

    vanquish WooCommerce Support Ticket System Web / CMS