SMSA Express

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SMSA Express records in CISA KEV

No SMSA Express vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-32842 CVE-2024-49249 · GHSA-624w-cg87-4jvw

WordPress SMSA Shipping plugin <= 2.3 - Arbitrary File Deletion vulnerability

HIGH 76

Path Traversal: '.../...//' vulnerability in SMSA Express SMSA Shipping smsa-shipping-official allows Path Traversal.This issue affects SMSA Shipping: from n/a through <= 2.3.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00548 Published 2025-01-07 No fix listed CWE-35

TI-2024-11193 CVE-2024-12066 · GHSA-7pgc-vj4f-cxq5

SMSA Shipping(official) <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion

MEDIUM 42

The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00912 Published 2024-12-21 No fix listed CWE-73

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0