Parcel Pro

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Parcel Pro records in CISA KEV

No Parcel Pro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Parcel Pro 2 records LOW

Records

2 records in Parcel Pro · all components

TI-2023-25126 CVE-2023-46624 · GHSA-f258-75gh-q3v9

WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection

LOW 28

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Parcel Pro.This issue affects Parcel Pro: from n/a through 1.6.11.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00475 Published 2023-12-19 No fix listed CWE-601

TI-2024-08706 CVE-2024-9383 · GHSA-p3h6-r8c9-3w7g

Parcel Pro <= 1.8.4 - Reflected Cross-Site Scripting

LOW 27

The Parcel Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 1.8.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00416 Published 2024-10-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0