Vulnerabilities

TI-2025-39124 CVE-2025-62976 · GHSA-7chw-hhvh-5rp9

WordPress Sendle Shipping plugin <= 6.02 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sendle Shipping: from n/a through <= 6.02.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00278 Published 2025-10-27 No fix listed CWE-862

TI-2025-37505 CVE-2025-60139 · GHSA-qp7w-4w3m-93cq

WordPress Sendle Shipping plugin <= 6.02 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Cross Site Request Forgery.This issue affects Sendle Shipping: from n/a through <= 6.02.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-09-26 No fix listed CWE-352

TI-2023-24535 CVE-2023-45761 · GHSA-q62w-24vx-vhfg

WordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)

LOW 32

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Joovii Sendle Shipping Plugin plugin <= 5.13 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00527 Published 2023-10-24 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Sendle Shipping plugin <= 6.02 - Broken Access Control vulnerability

WordPress Sendle Shipping plugin <= 6.02 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)