Multiparcels

8 CVEs across 2 Multiparcels products. Browse Multiparcels vulnerabilities, severities, and proof-of-concept exploits.

Multiparcels products with known CVEs

ProductCVEs
Multiparcels Shipping For Woocommerce5
Multiparcels Shipping For Woocommerce3
Multiparcels CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66655High7.12026-08-13Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.
CVE-2025-62995Medium4.32025-12-09Missing Authorization vulnerability in multiparcels MultiParcels Shipping For WooCommerce multiparcels-shipping-for-woocommerce allows Exploiting Incorrectly C…
CVE-2024-32095Medium4.32024-04-15Cross-Site Request Forgery (CSRF) vulnerability in MultiParcels MultiParcels Shipping For WooCommerce.This issue affects MultiParcels Shipping For WooCommerce…
CVE-2023-3954Medium6.12023-08-21The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page, leadin…
CVE-2023-3366Medium4.32023-08-21The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.2 does not have CRSF check when deleting a shipment, allowing attackers to make any logg…
CVE-2023-3671Medium6.12023-08-07The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page…
CVE-2023-3365High8.12023-08-07The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users…
CVE-2023-2843High8.82023-08-07The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL statement…