Advanced Shipment Tracking For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:zorem:advanced_shipment_tracking_for_woocommerce:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Zorem (87ce0d6c-931c-5f01-9de8-a7ba18e4a482) |
|---|---|
| Product | Advanced Shipment Tracking For Woocommerce (1102fa48-a423-554e-a037-975a198b11ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41635 |
vulnerable | 2026-06-08 05:48:30.676948 |
WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions.
Published: 2023-05-25T08:59:09.416Z
Updated: 2026-04-28T16:07:49.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4347 |
vulnerable | 2026-06-08 05:38:09.245785 |
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
CRITICAL (9.9)
The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenticated arbitrary options update. The function allows attackers (including those at customer level) to update any WordPress option in the database. Version 3.2.5 was initially released as a fix, but doesn't fully address the issue.
Published: 2023-06-07T01:51:16.287Z
Updated: 2026-04-08T16:48:40.985Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.