Skip to content
OpenAdvisories

Vendor

yapacdev

1 known vulnerabilities.

Products

WhatsOrder – Instant Checkout for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-9612

    WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs

    The WhatsOrder – Instant Checkout for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the yapacdev_generate_order_pdf. This makes it possible for unauthenticated attackers to ext…

    yapacdev WhatsOrder – Instant Checkout for WooCommerce Web / CMS