Zorem

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Zorem records in CISA KEV

No Zorem vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Local Pickup For Woocommerce 3 records MEDIUM Advanced Shipment Tracking For Woocommerce 2 records MEDIUM Sales Report Email For Woocommerce 1 record LOW

Records

2 records in Advanced Shipment Tracking For Woocommerce · all components

TI-2021-03204 CVE-2021-4347 · GHSA-9cp6-9c8r-555x

Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change

MEDIUM 43

The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenticated arbitrary options update.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00654 Published 2023-06-07 No fix listed CWE-862

TI-2022-20033 CVE-2022-41635 · GHSA-wmgr-g86h-2x5r

WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-25 No fix listed CWE-352

Open these records in search →

Critical	2
High	4
Medium	4
Low	0
No CVSS	0