Read the docs

multiparcels

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

multiparcels records in CISA KEV

No multiparcels vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Multiparcels Shipping For Woocommerce 5 records HIGH

Records

5 records in Multiparcels Shipping For Woocommerce · all components

TI-2023-02664 CVE-2023-2843 · GHSA-j9wp-57cc-qx5c

MultiParcels Shipping For WooCommerce < 1.14.15 - Subscribers+ SQLi

Priority HIGH 73

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL statement, which could allow any authenticated users, such as subscrib…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00872 Published 2023-08-07 Fixed in 1.14.15
TI-2023-03673 CVE-2023-3954 · GHSA-ccq7-hh37-hcx6

MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS

Priority MEDIUM 60

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used aga…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-08-21 Fixed in 1.15.4 CWE-79
TI-2023-03428 CVE-2023-3671 · GHSA-4f4q-pprq-947q

MultiParcels Shipping For WooCommerce < 1.15.4 - Reflected XSS

Priority MEDIUM 60

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be u…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-08-07 Fixed in 1.15.4
Open these records in search →