Medium · 5.9 CVE-2023-34170 EUVD-2023-38270GHSA-733g-66fc-5c3v

WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)

Published Jun 22, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.

Vendor	Product	Affected	Fixed
WP Overnight	Quick/Bulk Order Form for WooCommerce	≤ 3.5.7	—