Veille CVE

Recherche « Unknown SmartyParcel »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown SmartyParcel » ✕
  1. CVE-2026-107789 5.3 Moyenne

    Unknown SmartyParcel

    The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving shipping label downloads, allowing unauthenticated users to obtain the shipping labels of arbitrary orders, which contain customer names, addresses and phone numbers.

  2. CVE-2026-107788 4.3 Moyenne

    Unknown SmartyParcel

    The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records, allowing any authenticated user such as a subscriber to delete the shipping label and tracking records of arbitrary orders store-wide.