Multiparcels Shipping For Woocommerce (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-08-21. Vendor: Unknown.

CVEs of Multiparcels Shipping For Woocommerce

• CVE-2023-3954 - CVSS 6.1 (medium), 2023-08-21: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page,…
• CVE-2023-3366 - CVSS 4.3 (medium), 2023-08-21: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any…
• CVE-2023-3671 - CVSS 6.1 (medium), 2023-08-07: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the…
• CVE-2023-3365 - CVSS 8.1 (high), 2023-08-07: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated…
• CVE-2023-2843 - CVSS 8.8 (high), 2023-08-07: The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL…