Dhl Shipping Germany For Woocommerce
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:dhl_shipping_germany_for_woocommerce:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Dhl Shipping Germany For Woocommerce (b46d5e24-8454-593f-910f-fbf62afcf478) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16981 |
vulnerable | 2026-09-16 04:32:56.832134 |
DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Download via IDOR
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attacker can enumerate sequential ids and download every stored shipping label, each containing the customer's full name, complete postal address, and order reference.
Published: 2026-08-05T06:00:11.173Z
Updated: 2026-08-06T15:09:49.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16993 |
vulnerable | 2026-09-16 04:32:56.703676 |
DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via Unprotected Uploads Directory
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web server that does not honor .htaccess (such as nginx) an unauthenticated visitor can download stored shipping labels (each containing a customer's name and postal address) by requesting predictable filenames.
Published: 2026-08-05T06:00:11.348Z
Updated: 2026-08-05T14:09:16.771Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.