Hi @ithagen ,
We’re currently working on the updates. If you’ve noticed any specific issues, please share the details with us.
We’ll review and cross-verify them with the updates in progress.
Kindly use the this link to share the information:
This is urgent! We need to know if you can fix this security issue now, it has been public known for 7 days.
“This vulnerability is highly dangerous and expected to become mass exploited.”
“SQL Injection: This could allow a malicious actor to directly interact with your database, including but not limited to stealing information.”
https://patchstack.com/database/wordpress/plugin/wc-partial-shipment/vulnerability/wordpress-woocommerce-partial-shipment-3-2-sql-injection-vulnerability?_a_id=350
I’ve already disabled and deleted this vulnerable plug-in on my site.
I’m currently looking at this alternative … not free of charge, but looks good 🙂
https://codecanyon.net/item/woocommerce-partial-orders/5808497
Paully
Hi @ithagen @plittlefield
The plugin has been updated, and version 3.3 has been released with all the required fixes.
Thanks
