Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: WpExperts Hub Clear all filters
TI-2026-08627 CVE-2026-9858 · GHSA-57j3-8vm6-c5m2

Missing authorization in WpExperts Hub Partial Shipment for WooCommerce

Priority LOW 20

The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.4 via the wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-19 No fix listed CWE-862
TI-2025-30488 CVE-2025-48118 · GHSA-8c4g-ff46-4q89

WordPress Woocommerce Partial Shipment plugin <= 3.2 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpExperts Hub Woocommerce Partial Shipment wc-partial-shipment allows SQL Injection.This issue affects Woocommerce Par…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00303 Published 2025-06-17 No fix listed CWE-89