nmedia Admin and Customer Messages After Order for WooCommerce: OrderConvo
CVE-2025-13389Medium 5.3Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure0.3%
CVE-2025-13452Medium 4.3Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated User Impersonation in Order Messages0.3%
CVE-2024-13355Medium 5.4Admin and Customer Messages After Order for WooCommerce <= 13.2 - Authenticated (Subscriber+) Limited File Upload to Cross-Site Scripting0.4%