Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-30781 EUVD-2025-8381GHSA-fhw5-vp5p-7wxx

WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPFactory Scheduled & Automatic Order Status Controller for WooCommerce order-status-rules-for-woocommerce allows Phishing.This issue affects Scheduled & Automatic Order Status Controller for WooCommerce: from n/a through <= 3.7.1.

Affected products

VendorProductAffectedFixed
WPFactory Scheduled & Automatic Order Status Controller for WooCommerce ≤ 3.7.1 —

References