Is Woo Order Export Lite safe?

Plugin details

• Slug: woo-order-export-lite
• Requires PHP: 7.4.0+
• Max supported PHP (analyzed): <8.0

Known vulnerabilities

• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.1.8 [CVE-2021-24169, WordPress Advanced Order Export For WooCommerce plugin <= 3.1.7 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability, Advanced Order Export For WooCommerce <= 3.1.7 - Reflected Cross-Site Scripting, Advanced Order Export For WooCommerce &lt; 3.1.8 - Authenticated Reflected Cross-Site Scripting (XSS)]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.1.8 [CVE-2021-27349, Advanced Order Export for WooCommerce <= 3.1.7 - Cross-Site Scripting, EUVD-2021-14109]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.1.4 [CVE-2020-11727, WordPress Advanced Order Export For WooCommerce plugin <= 3.1.3 - Authenticated Cross-Site Scripting (XSS) vulnerability, Advanced Order Export for WooCommerce <= 3.1.3 - Cross-Site Scripting, Advanced Order Export For WooCommerce &lt; 3.1.4 - Authenticated Cross-Site Scripting (XSS)]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 1.5.5 [CVE-2018-11525, WordPress Advanced Order Export For WooCommerce plugin <= 1.5.4 - CSV Injection vulnerability, Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection, Advanced Order Export For WooCommerce &lt;= 1.5.4 - CSV Injection]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.3.2 [CVE-2022-35275, WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Reflected Cross-Site Scripting (XSS) vulnerability, Advanced Order Export For WooCommerce <= 3.3.1 - Reflected Cross-Site Scripting, Advanced Order Export For WooCommerce &lt; 3.3.2 - Reflected Cross-Site Scripting]

+ 5 more known vulnerabilities

• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.3.3 [CVE-2022-40128, WordPress Advanced Order Export For WooCommerce plugin <= 3.3.2 - Cross-Site Request Forgery (CSRF) vulnerability, Advanced Order Export For WooCommerce <= 3.3.2 - Cross-Site Request Forgery, Advanced Order Export For WooCommerce &lt; 3.3.3 - Export Files via CSRF]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.4.5 [CVE-2024-31266, WordPress Advanced Order Export For WooCommerce Plugin <= 3.4.4 is vulnerable to Remote Code Execution (RCE), Advanced Order Export For WooCommerce <= 3.4.4 - Authenticated (Shop Manager+) Remote Code Execution]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 3.5.6 [CVE-2024-10828, WordPress Advanced Order Export For WooCommerce Plugin <= 3.5.5 is vulnerable to PHP Object Injection, Advanced Order Export For WooCommerce <= 3.5.5 - Unauthenticated PHP Object Injection via Order Details]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 4.1.0 [CVE-2026-11360, Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter, WordPress Advanced Order Export For WooCommerce Plugin <= 4.0.10 is vulnerable to SQL Injection]
• Advanced Order Export For WooCommerce [woo-order-export-lite] < 4.0.10 [CVE-2026-56042, Advanced Order Export For WooCommerce <= 4.0.9 - Authenticated (Customer+) Stored Cross-Site Scripting]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Customizer Export/Import — 100000+ active installs — max PHP 8.4
• WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel — 100000+ active installs — max PHP 8.4
• Export All URLs — 50000+ active installs — max PHP 8.4
• Export media with selected content (by DKZR) — 40000+ active installs — max PHP 8.4
• WP Import Export Lite — 40000+ active installs