Vulnerabilities

TI-2026-84143 CVE-2026-120558 · GHSA-cm75-3jj2-f2gr

SQL injection in Advanced Shipment Tracking for WooCommerce

LOW 34

The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tracking_provider` parameter of the `POST /wp-json/wc-ast/v3/orders/<order_id>/shipment-trackings` REST endpoint…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00347 Published 2026-11-03 No fix listed CWE-89

TI-2026-81680 CVE-2026-109236 · GHSA-fmvc-698m-vpm5

Authentication bypass in Customer Email Verification for WooCommerce

LOW 22

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verification Token in all versions up to, and including, 2.8.2.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00344 Published 2026-10-28 No fix listed CWE-287

TI-2026-41596 CVE-2026-57773 · GHSA-2cf6-9qcg-5g2f

WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-advanced-shipment-tracking allows Blind SQL Injection.This issue…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00383 Published 2026-07-13 No fix listed CWE-89

TI-2024-20659 CVE-2024-31283 · GHSA-4936-pv53-5frr

WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2024-06-09 No fix listed CWE-862

TI-2024-21688 CVE-2024-32814 · GHSA-m35v-cvxx-vrm6

WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00295 Published 2024-06-09 No fix listed CWE-862

TI-2022-19337 CVE-2022-40702 · GHSA-7m22-rg74-5fh4

WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

LOW 25

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00379 Published 2024-01-17 No fix listed CWE-862

TI-2022-17845 CVE-2022-38141 · GHSA-v5c8-894r-mxm7

WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

LOW 29

Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00403 Published 2024-01-17 No fix listed CWE-862

TI-2023-02662 CVE-2023-2841 · GHSA-2wc7-rq3v-m6mj

Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection

LOW 33

The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied para…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00775 Published 2023-11-22 No fix listed CWE-89

TI-2021-03204 CVE-2021-4347 · GHSA-9cp6-9c8r-555x

Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change

MEDIUM 43

The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenticated arbitrary options update.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00654 Published 2023-06-07 No fix listed CWE-862

TI-2022-20033 CVE-2022-41635 · GHSA-wmgr-g86h-2x5r

WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-25 No fix listed CWE-352

Vulnerabilities

Filters