Skip to content
OpenAdvisories

Vendor

biteship

3 known vulnerabilities.

Products

Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo 2 Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-5816

    Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details

    The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.0 via the get_order_detail() due to missing validation on a user control…

    biteship Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship Web / CMS
  • Medium 5.9
    CVE-2023-49767

    WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Stored XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Regule…

    biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo