Advisories · Technology

SmartyParcel.

Every CVE that names SmartyParcel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107789 CVE record

CVSS 5.3 Medium

SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR
- SmartyParcel
- Broken access control
Not analysed yet 21 Oct 2026
CVE-2026-107788 CVE record

CVSS 4.3 Medium

SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion
- SmartyParcel
- Broken access control
Not analysed yet 21 Oct 2026