GCVE - cpe:2.3:a:posti:posti_shipping:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:posti:posti_shipping:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Posti (`fa681d92-d09b-5e57-81cc-d601395a2909`)
Product	Posti Shipping (`fac8525d-32e0-5789-989b-45ea794da9bc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-56005`	vulnerable	2026-06-08 06:54:17.337348	WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability MEDIUM (6.5) Cross-Site Request Forgery (CSRF) vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through <= 3.10.3. Published: 2024-12-16T14:14:09.513Z Updated: 2026-04-28T16:10:53.618Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/posti-shipping/vulnerability/wordpress-posti-shipping-plugin-3-10-3-csrf-to-settings-change-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-50512`	vulnerable	2026-06-08 06:52:10.303803	WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability MEDIUM (5.3) Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2. Published: 2024-10-30T07:42:20.973Z Updated: 2026-05-11T21:35:51.809Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/posti-shipping/vulnerability/wordpress-posti-shipping-plugin-3-10-2-full-path-disclosure-fpd-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.