Vulnerabilities in Zorem
10 resultsCVE-2023-2841HIGHAdvanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL InjectionEPSS 0.8%CVE-2021-4347CRITICALAdvanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options ChangeEPSS 0.7%CVE-2024-31283HIGHWordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-38141MEDIUMWordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2026-57773HIGHWordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2022-40702MEDIUMWordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2026-120558HIGHAdvanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' ParameterEPSS 0.3%CVE-2026-109236MEDIUMCustomer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' ParameterEPSS 0.3%CVE-2024-32814MEDIUMWordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2022-41635MEDIUMWordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%