StackWC vulnerabilities

🔔 Create alert RSS

Published CVEs affecting StackWC products: 2 record(s), with severity, exploitation and fixes.

Order Listener for WooCommerce 1 Open Close WooCommerce Store 1

Exploited only (KEV) →

CVE-2025-68018 Critical · 9.4 CWE-862 Jan 22, 2026

WordPress Order Listener for WooCommerce plugin <= 3.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in StackWC Order Listener for WooCommerce woc-order-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Listener for WooCommerce: from n/a through <= 3.6.1.

CVE-2025-62935 Medium · 4.3 CWE-862 Oct 26, 2025

WordPress Open Close WooCommerce Store plugin <= 5.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in StackWC Open Close WooCommerce Store woc-open-close allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Close WooCommerce Store: from n/a through <= 5.0.0.