Skip to content
OpenAdvisories

Vendor

smsaexpress

1 known vulnerabilities.

Products

SMSA Shipping (official) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-12066

    SMSA Shipping(official) <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion

    The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.3. This makes it possible for authenticated attacker…

    smsaexpress SMSA Shipping (official) Web / CMS