Skip to content
Zorem vulnerabilities
Newest
-
zorem advanced shipment tracking for woocommerce
Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter
CVE-2026-120558
7.2 High
-
wpfactory customer email verification for woocommerce
Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter
CVE-2026-109236
4.8 Medium
-
zorem advanced shipment tracking for woocommerce
WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability
CVE-2026-57773
7.6 High
-
zorem advanced local pickup for woocommerce
WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability
CVE-2024-31283
7.5 High
-
zorem advanced local pickup for woocommerce
WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability
CVE-2024-32814
5.3 Medium
-
zorem advanced local pickup for woocommerce
WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control
CVE-2022-40702
5.4 Medium
-
zorem sales report email for woocommerce
WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control
CVE-2022-38141
4.3 Medium
-
zorem advanced local pickup for woocommerce, local pickup +1 more
Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
CVE-2023-2841
7.2 High
-
zorem advanced shipment tracking for woocommerce
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
CVE-2021-4347
9.9 Critical
-
zorem advanced shipment tracking for woocommerce
WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-41635
4.3 Medium