Vulnerabilities in MultiParcels

3 results

Vexday analysis

MultiParcels apresenta footprint mínimo de vulnerabilidades com apenas 1 CVE registrado na base, sem incidentes de ataque ativo documentado (KEV). A fraqueza identificada (CWE-352 - Cross-Site Request Forgery) é de natureza moderada e não há registros de exploração recente, indicando risco baixo no curto prazo.

CVE-2025-62995MEDIUMWordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-32095MEDIUMWordPress MultiParcels Shipping For WooCommerce plugin < 1.16.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-66655HIGHWordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%