Zorem
8 CVEs across 7 Zorem products. Browse Zorem vulnerabilities, severities, and proof-of-concept exploits.
Zorem products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57773 | High | 7.6 | 2026-07-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-adva… |
CVE-2024-31283 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1… |
CVE-2024-32814 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1… |
CVE-2022-40702 | Medium | 5.4 | 2024-01-17 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1… |
CVE-2022-38141 | Medium | 4.3 | 2024-01-17 | Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8. |
CVE-2023-2841 | High | 7.2 | 2023-11-22 | The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including… |
CVE-2021-4347 | Critical | 9.9 | 2023-06-07 | The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenti… |
CVE-2022-41635 | Medium | 4.3 | 2023-05-25 | Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions. |