Description
Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zorem | Advanced Shipment Tracking for WooCommerce | ≤ 3.5.2 | — |
Medium · 4.3
CVE-2022-41635
EUVD-2022-44825GHSA-wmgr-g86h-2x5r
WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack