Advisories · Technology

InPost PL.

Every CVE that names InPost PL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93580 CVE record

CVSS 5.3 Medium

InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
- InPost PL
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-9702 CVE record

CVSS 7.5 High

InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking
- InPost PL
Not analysed yet 25 Jun 2026