Advisories · Technology

zorem Advanced Shipment Tracking for WooCommerce.

Every CVE that names zorem Advanced Shipment Tracking for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-120558 CVE record

CVSS 7.2 High

Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter
- zorem Advanced Shipment Tracking for WooCommerce
- SQL injection
Not analysed yet 3 Nov 2026
CVE-2026-57773 CVE record

CVSS 7.6 High

WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability
- Zorem Advanced Shipment Tracking for WooCommerce
- SQL injection
Not analysed yet 13 Jul 2026
CVE-2021-4347 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
- zorem Advanced Shipment Tracking for WooCommerce
- Broken access control
Not analysed yet 7 Jun 2023
CVE-2022-41635 CVE record

CVSS 4.3 Medium

WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
- Zorem Advanced Shipment Tracking for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 25 May 2023