Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: DHL Shipping Germany for WooCommerce 4.0.1 Clear all filters
TI-2026-14151 CVE-2026-16993 · GHSA-q7cc-q448-hh85

DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory

Priority LOW 17

The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web s…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00269 Published 2026-08-05 Fixed in 4.0.1 CWE-200
TI-2026-14139 CVE-2026-16981 · GHSA-xqqx-fcgc-wmxp

DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Download via IDOR

Priority LOW 30

The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an una…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00323 Published 2026-08-05 Fixed in 4.0.1 CWE-639