Vulnerability in Dhl Shipping Germany For Woocommerce
CVE-2026-16981
The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attack…
Affected products
- Unknown Dhl Shipping Germany For Woocommerce — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)