Unknown Smartyparcel vulnerabilities

• unknown smartyparcel SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR CVE-2026-107789 5.3 MediumOctober 21, 2026
• unknown smartyparcel SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion CVE-2026-107788 4.3 MediumOctober 21, 2026