Multiparcels
2 CVEs across 2 Multiparcels products. Browse Multiparcels vulnerabilities, severities, and proof-of-concept exploits.
Multiparcels products with known CVEs
Multiparcels CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-66655 | High | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions. |
CVE-2025-62995 | Medium | 4.3 | 2025-12-09 | Missing Authorization vulnerability in multiparcels MultiParcels Shipping For WooCommerce multiparcels-shipping-for-woocommerce allows Exploiting Incorrectly C… |
CVE-2024-32095 | Medium | 4.3 | 2024-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in MultiParcels MultiParcels Shipping For WooCommerce.This issue affects MultiParcels Shipping For WooCommerce… |
CVE-2023-3954 | Medium | 6.1 | 2023-08-21 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page, leadin… |
CVE-2023-3366 | Medium | 4.3 | 2023-08-21 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any logg… |
CVE-2023-3671 | Medium | 6.1 | 2023-08-07 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page… |
CVE-2023-3365 | High | 8.1 | 2023-08-07 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users… |
CVE-2023-2843 | High | 8.8 | 2023-08-07 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL statement… |