Skip to content
OpenAdvisories
High · 7.1 CVE-2024-43127 EUVD-2024-40054GHSA-pcp7-q64v-6h9p

WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

Published Aug 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11.

Affected products

VendorProductAffectedFixed
WPFactory Products, Order & Customers Export for WooCommerce ≤ 2.0.11 —

References