Vulnerabilities / Order Splitter for WooCommerce
Order Splitter for WooCommerce vulnerabilities
Advisories WPSec published for Order Splitter for WooCommerce. Other sources may list more. Its attack surface: Order Splitter for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2367 | Order Splitter for WooCommerce <= 5.3.8 - Missing Authorization to Unauthenticated Order Totals Recalculation, Log Clearing and Test Email Sending | Medium 5.3 | 5.3.9 |
| 2026-11-03 | WPSEC-2026-2366 | Order Splitter for WooCommerce <= 5.3.8 - Missing Authorization to Authenticated (Subscriber+) Order Split Manipulation and Settings Modification via Multiple AJAX Actions | Medium 5.4 | 5.3.9 |
License: CC BY 4.0