Skip to content
OpenAdvisories

Vendor

zorem

10 known vulnerabilities.

Products

Advanced Shipment Tracking for WooCommerce 4 Advanced Local Pickup for WooCommerce 3 Zorem Local Pickup 1 Sales Report Email for WooCommerce 1 Customer Email Verification for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-109236

    Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter

    The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via a Predictable Email-Verification Token in all versions up to, and including, 2.8.2. This is due to the `authenticate_user_by_email_link()` function…

    zorem Customer Email Verification for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-32814

    WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.

    zorem Advanced Local Pickup for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2022-40702

    WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

    Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2.

    zorem Advanced Local Pickup for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2022-38141

    WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

    Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8.

    zorem Sales Report Email for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2022-41635

    WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions.

    zorem Advanced Shipment Tracking for WooCommerce Web / CMS