Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-38740 EUVD-2024-37588GHSA-f65q-pvv3-2xq6

WordPress Packlink PRO shipping module plugin <= 3.4.6 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO shipping module: from n/a through 3.4.6.

Affected products

VendorProductAffectedFixed
Packlink Shipping S.L. Packlink PRO shipping module ≤ 3.4.6 —

References