WP-Safety

Order Export for WooCommerce Security & Risk Analysis

wordpress.org/plugins/order-export-and-more-for-woocommerce

Export WooCommerce orders & export products with advanced filtering. Supports CSV & all Excel formats.

2K active installs v3.26 PHP 5.0+ WP 5.0+ Updated Dec 3, 2025
exportexport-ordersexport-productsorders-exportwoocommerce-export
99
A · Safe
CVEs total2
Unpatched0
Last CVEJan 30, 2025
Plugin page Download
Safety Verdict

Is Order Export for WooCommerce Safe to Use in 2026?

Generally Safe

Score 99/100

Order Export for WooCommerce has a strong security track record. Known vulnerabilities have been patched promptly.

2 known CVEsLast CVE: Jan 30, 2025Updated 4mo ago
Risk Assessment

The "order-export-and-more-for-woocommerce" plugin version 3.26 exhibits a generally good security posture with several strengths. All identified entry points (AJAX handlers) have proper authentication checks, and the majority of SQL queries are prepared. Extensive output escaping is also in place, and the plugin demonstrates good practice by avoiding external HTTP requests. The presence of nonce and capability checks on all entry points further strengthens its security.

Key Concerns

  • Use of unserialize
  • Flow with unsanitized paths
  • High severity taint flow
  • Medium severity CVEs in history
  • Bundled library (Select2)
Vulnerabilities
2

Order Export for WooCommerce Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
2

2 total CVEs

CVE-2024-13623medium · 5.9Exposure of Sensitive Information to an Unauthorized Actor

Order Export for WooCommerce <= 3.24 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

Jan 30, 2025 Patched in 3.25 (1d)
CVE-2024-43259medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Order Export for WooCommerce <= 3.23 - Unauthenticated Sensitive Information Exposure

Aug 12, 2024 Patched in 3.24 (16d)
Code Analysis
Analyzed Mar 16, 2026

Order Export for WooCommerce Code Analysis

Dangerous Functions
1
Raw SQL Queries
5
12 prepared
Unescaped Output
7
114 escaped
Nonce Checks
3
Capability Checks
3
File Operations
8
External Requests
0
Bundled Libraries
1

Dangerous Functions Found

unserialize$this->settings = unserialize($ret['export_data']);inc\JEMEXP_Order.php:2566

Bundled Libraries

Select2

SQL Query Safety

71% prepared17 total queries

Output Escaping

94% escaped121 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

6 flows3 with unsanitized paths
<jem-exporter> (inc\jem-exporter.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Order Export for WooCommerce Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_JEMEXP_save_settingsinc\jem-exporter.php:39
authwp_ajax_get_order_datainc\jem-exporter.php:42
authwp_ajax_JEMEXP_get_data_chunkinc\JEMEXP_Order.php:157
WordPress Hooks 7
actionadmin_menuinc\jem-exporter.php:34
actionadmin_enqueue_scriptsinc\jem-exporter.php:36
filtersafe_style_cssinc\jem-exporter.php:128
filtersafe_style_cssinc\jem-exporter.php:331
actionadmin_post_jemxp_download_batch_filemain.php:59
actionadmin_enqueue_scriptsmain.php:148
actionwoocommerce_initmain.php:150
Maintenance & Trust

Order Export for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 3, 2025
PHP min version5.0
Downloads118K

Community Trust

Rating76/100
Number of ratings14
Active installs2K
Alternatives

Order Export for WooCommerce Alternatives

Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers

Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers

woocommerce-exporter

A
89

Export WooCommerce products, orders, customers, categories, tags, subscriptions & more into formatted files like CSV, XML, Excel 2007, XLS, XLSX.

7K 9 CVEs
Order Export & Order Import for WooCommerce

Order Export & Order Import for WooCommerce

order-import-export-for-woocommerce

A
90

The best order export import plugin for WooCommerce. Easily import and export WooCommerce orders and WooCommerce coupons using CSV.

60K 7 CVEs
All Woocommerce Export

All Woocommerce Export

all-woocommerce-export

A
100

Export WooCommerce Orders, products and Customers into Excel. Supports all Excel format XLS, XLSX & Mac)

100 No CVEs
WP Exporter Plus

WP Exporter Plus

wp-exporter-plus

A
100

This plugin provides functionality to export orders, posts, users, products, top 10 selling products data in CSV.

10 No CVEs
SWE Easy Orders Export

SWE Easy Orders Export

swe-easy-orders-export

A
85

SWE Easy Orders Export

0 No CVEs
Developer Profile

Order Export for WooCommerce Developer Profile

WebFactory

28 plugins · 3.5M total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
699 days
View full developer profile
Detection Fingerprints

How We Detect Order Export for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/order-export-and-more-for-woocommerce/css/bootstrap.min.css/wp-content/plugins/order-export-and-more-for-woocommerce/css/font-awesome.min.css/wp-content/plugins/order-export-and-more-for-woocommerce/css/select2.min.css/wp-content/plugins/order-export-and-more-for-woocommerce/css/jem-export-lite.css/wp-content/plugins/order-export-and-more-for-woocommerce/js/popper.min.js/wp-content/plugins/order-export-and-more-for-woocommerce/js/bootstrap.min.js/wp-content/plugins/order-export-and-more-for-woocommerce/js/select2.js/wp-content/plugins/order-export-and-more-for-woocommerce/js/main.js
Script Paths
js/main.jsjs/popper.min.jsjs/bootstrap.min.jsjs/select2.js
Version Parameters
order-export-and-more-for-woocommerce/js/main.js?ver=order-export-and-more-for-woocommerce/css/bootstrap.min.css?ver=order-export-and-more-for-woocommerce/css/font-awesome.min.css?ver=order-export-and-more-for-woocommerce/js/popper.min.js?ver=order-export-and-more-for-woocommerce/js/bootstrap.min.js?ver=order-export-and-more-for-woocommerce/css/select2.min.css?ver=order-export-and-more-for-woocommerce/js/select2.js?ver=order-export-and-more-for-woocommerce/css/jem-export-lite.css?ver=

HTML / DOM Fingerprints

CSS Classes
jemxp-export-optionsjem-exporter-wrapperjemxp-order-bulk-actionsjemxp-export-filters
HTML Comments
<!-- @simon 3.0 --><!-- TODO at some point we need to consider an autoloader --><!-- This writes out the file --><!-- TODO need to make this variable by type -->+5 more
Data Attributes
data-nonce='<?php echo wp_create_nonce('jemexp_saving_field'); ?>'
JS Globals
jemexport_settingsjemexp_admin_data
REST Endpoints
/wp-json/jemxp/v1/settings
FAQ

Frequently Asked Questions about Order Export for WooCommerce