CVE-2026-4140

The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6. This is due to missing nonce validation in the ni_order_export_action() AJAX handler function. The handler processes settings updates when the 'page' parameter is set to 'nioe-order-settings', delegating to Ni_Order_Setting::page_ajax() which calls update_option('ni_order_export_option', $_REQUEST) without verifying any nonce or checking user capabilities. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request, granted they can trick a site administrator into performing an action such as clicking a link.

• CWE-352

• https://plugins.trac.wordpress.org/browser/ni-woocommerce-order-export/tags/3.1.6/include/ni-order-export.php#L136
• https://plugins.trac.wordpress.org/browser/ni-woocommerce-order-export/tags/3.1.6/include/ni-order-setting.php#L59
• https://plugins.trac.wordpress.org/browser/ni-woocommerce-order-export/trunk/include/ni-order-export.php#L136
• https://plugins.trac.wordpress.org/browser/ni-woocommerce-order-export/trunk/include/ni-order-setting.php#L59
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2d62c49c-3a33-4865-abcc-22d8e38ac198?source=cve

Published

Apr 22, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41394OpenClaw before 2026.3.31 contains an authentication bypass …8.8
• CVE-2026-41395OpenClaw before 2026.3.28 contains a webhook replay vulnerab…8.2
• CVE-2026-41396OpenClaw before 2026.3.31 allows workspace .env files to ove…7.8
• CVE-2026-41397OpenClaw before 2026.3.31 contains a sandbox escape vulnerab…9.6
• CVE-2026-41398OpenClaw before 2026.4.2 contains an improper access control…4.6
• CVE-2026-41399OpenClaw before 2026.3.28 accepts unbounded concurrent unaut…8.7
• CVE-2026-41400OpenClaw before 2026.3.31 contains an incomplete fix for CVE…7.5
• CVE-2026-41401libyang before 5.2.6 contains a heap use-after-free write vu…7.1
• CVE-2026-41402OpenClaw before 2026.3.31 contains a scope bypass vulnerabil…5.4
• CVE-2026-41403OpenClaw before 2026.3.31 misclassifies proxied remote reque…4
• CVE-2026-41404OpenClaw before 2026.3.31 contains an incomplete scope-clear…8.8
• CVE-2026-41405OpenClaw before 2026.3.31 parses MS Teams webhook request bo…8.7