Zorem

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Zorem records in CISA KEV

No Zorem vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Local Pickup For Woocommerce 3 records MEDIUM Advanced Shipment Tracking For Woocommerce 2 records MEDIUM Sales Report Email For Woocommerce 1 record LOW

Records

3 records in Advanced Local Pickup For Woocommerce · all components

TI-2024-20659 CVE-2024-31283 · GHSA-4936-pv53-5frr

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2024-06-09 No fix listed CWE-862

TI-2023-02662 CVE-2023-2841 · GHSA-2wc7-rq3v-m6mj

Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection

LOW 33

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied para…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00775 Published 2023-11-22 No fix listed CWE-89

TI-2022-19337 CVE-2022-40702 · GHSA-7m22-rg74-5fh4

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

LOW 25

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00379 Published 2024-01-17 No fix listed CWE-862

Open these records in search →

Critical	2
High	4
Medium	4
Low	0
No CVSS	0