Skip to content
OpenAdvisories

Vendor

WpExperts Hub

2 known vulnerabilities.

Products

Partial Shipment for WooCommerce 1 Woocommerce Partial Shipment 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-9858

    Partial Shipment for Woocommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Modification via wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX Actions

    The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.4 via the wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX actions. This is due to the AJAX handler…

    WpExperts Hub Partial Shipment for WooCommerce Web / CMS