Vulnerabilities

TI-2025-18402 CVE-2025-24685 · GHSA-9v7v-vv4w-gxh3

WordPress Morkva UA Shipping plugin <= 1.0.18 - Local File Inclusion vulnerability

LOW 38

Path Traversal: '.../...//' vulnerability in Ihor Kit Morkva UA Shipping morkva-ua-shipping allows PHP Local File Inclusion.This issue affects Morkva UA Shipping: from n/a through <= 1.0.18.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00682 Published 2025-01-27 No fix listed CWE-35

TI-2025-18329 CVE-2025-24612 · GHSA-r7f7-xvfh-9v3p

WordPress Shipping for Nova Poshta plugin <= 1.19.6 - SQL Injection vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ihor Kit Shipping for Nova Poshta nova-poshta-ttn allows SQL Injection.This issue affects Shipping for Nova Poshta: fr…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00385 Published 2025-01-27 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Morkva UA Shipping plugin <= 1.0.18 - Local File Inclusion vulnerability

WordPress Shipping for Nova Poshta plugin <= 1.19.6 - SQL Injection vulnerability