Skip to content
OpenAdvisories
High · 8.5 CVE-2025-22713 EUVD-2026-1551GHSA-4q8g-3m4g-676p

WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - SQL Injection vulnerability

Published Jan 8, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows SQL Injection.This issue affects WooCommerce Orders & Customers Exporter: from n/a through <= 5.4.

Affected products

VendorProductAffectedFixed
vanquish WooCommerce Orders & Customers Exporter ≤ 5.4 —

References