Skip to content
OpenAdvisories

Vendor

AfterShip & Automizely

2 known vulnerabilities.

Products

AfterShip Tracking 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-66460

    WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

    AfterShip & Automizely AfterShip Tracking
  • Medium 5.3
    CVE-2025-58201

    WordPress AfterShip Tracking Plugin <= 1.17.17 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in AfterShip & Automizely AfterShip Tracking aftership-woocommerce-tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AfterShip Tracking: from n/a through <= 1.17.17.

    AfterShip & Automizely AfterShip Tracking