TI-2026-37825 CVE-2026-52700 · GHSA-rg72-qvpg-fcv6
WordPress WCMultiShipping plugin <= 3.0.2 - SQL Injection vulnerability
Priority LOW 37
Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.
WcMultishipping – Mondial Relay & Chronopost for Wooommerce
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
WcMultishipping – Mondial Relay & Chronopost for Wooommerce records in CISA KEVNo WcMultishipping – Mondial Relay & Chronopost for Wooommerce vulnerabilities are listed in CISA KEV.
Records
1 record