This is just the HEAD branch of the last version of non-maintained 6.x version.
1) Clear all carts that have deleted webform products.
2) Clear all carts that have submissions from deleted webform node.
3) Respect published/unpublished settings https://www.drupal.org/node/1358390
4) Fixed warning on order change status, related to https://www.drupal.org/node/1438776
See CiviCRM private report - Moderately Critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2015-094
See Ubercart Webform Checkout Pane - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-087
Drupal is a registered trademark of Dries Buytaert.