Read the docs

WpExperts Hub

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WpExperts Hub records in CISA KEV

No WpExperts Hub vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-30488 CVE-2025-48118 · GHSA-8c4g-ff46-4q89

WordPress Woocommerce Partial Shipment plugin <= 3.2 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpExperts Hub Woocommerce Partial Shipment wc-partial-shipment allows SQL Injection.This issue affects Woocommerce Par…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00303 Published 2025-06-17 No fix listed CWE-89
TI-2026-08627 CVE-2026-9858 · GHSA-57j3-8vm6-c5m2

Missing authorization in WpExperts Hub Partial Shipment for WooCommerce

Priority LOW 20

The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.4 via the wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-19 No fix listed CWE-862
Open these records in search →