Medium · 4.3 CVE-2025-57914 EUVD-2025-30722GHSA-m3mj-2wrg-7573

WordPress Deliver via Shipos for WooCommerce plugin <= 3.0.2 - Cross Site Request Forgery (CSRF) vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Matat Technologies Product: Deliver via Shipos for WooCommerce Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Cross Site Request Forgery.This issue affects Deliver via Shipos for WooCommerce: from n/a through <= 3.0.2.

Affected products

Vendor	Product	Affected	Fixed
Matat Technologies	Deliver via Shipos for WooCommerce	≤ 3.0.2	—

References

https://patchstack.com/database/Wordpress/Plugin/wc-shipos-delivery/vulnerability/wordpress-deliver-via-shipos-for-woocommerce-plugin-3-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry