Read the docs

Biteship

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Biteship records in CISA KEV

No Biteship vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Biteship 3 records LOW

Records

4 records

TI-2024-16380 CVE-2024-24866 · GHSA-97rx-wgvh-p56f

WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Reflected XSS.This issue affects Biteship:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0037 Published 2024-02-05 No fix listed CWE-79
TI-2023-27177 CVE-2023-49767 · GHSA-4v5v-pg2w-hjcf

WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Stored XSS.This issue affects Biteship: Pl…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-12-15 No fix listed CWE-79
TI-2023-05766 CVE-2023-6278 · GHSA-3wf6-8fcq-f34q

Biteship for WooCommerce < 2.2.25 - Reflected Cross-Site Scripting

Priority LOW 27

The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo WordPress plugin before 2.2.25 does not sanitise and escape the biteship_error and biteship_message parameters before outputting them back in the page, lead…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0037 Published 2024-01-29 Fixed in 2.2.25 CWE-79
TI-2025-05244 CVE-2025-5816 · GHSA-qv27-gc8p-rx8p

Missing authorization in Biteship Plugin Pengiriman WooCommerce Kurir Reguler, Instan…

Priority LOW 20

The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.0 via the get_order_detail() due…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00281 Published 2025-07-18 No fix listed CWE-862
Open these records in search →