If you can't update your WooCommerce plugin, use the code at the bottom of this post : http://blog.secupress.fr/en/vulnerability-in-woocommerce-2-3-10-object-injection-374.html