Now officially on WordPress.org

CVE Database / CVE-2026-11360

CVE · Medium

CVE-2026-11360 — Advanced Order Export For WooCommerce [woo-order-export-lite] < 4.1.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-11360 Advanced Order Export For WooCommerce [woo-order-export-lite] < 4.1.0 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Medium 4.9 < 4.1.0 4.1.0 2026-06-17 —

CVE-2026-11360

The Advanced Order Export For WooCommerce plugin for WordPress contains a vulnerability in versions up to 4.0.10 that can be exploited by attackers with shop manager-level access or higher. This flaw arises from inadequate protection against malicious input, specifically the 'sort_direction' parameter, which is not properly sanitized before being used in SQL queries. As a result, attackers can inject additional SQL code into existing queries, potentially allowing them to extract sensitive database information.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings