Skip to content
OpenAdvisories

Vendor

zorem

10 known vulnerabilities.

Products

Advanced Shipment Tracking for WooCommerce 4 Advanced Local Pickup for WooCommerce 3 Zorem Local Pickup 1 Sales Report Email for WooCommerce 1 Customer Email Verification for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2021-4347

    Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change

    The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenticated arbitrary options update. The function allows attackers (including those at customer level) to…

    zorem Advanced Shipment Tracking for WooCommerce Web / CMS