Product · Drupal

Commerce Shipping

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 2.7

CVE-2026-118557

Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262

Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful Browsing. This issue affects Commerce Shipping versions: from 0.0.0 to 2.16.0, from 3.0.0 to 3.0.6.

Drupal Commerce Shipping drupal/commerce_shipping Packagist

Oct 30, 2026