Zorem vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20244
3. 20263

Newest CVEs

• CVE-2026-120558

  Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter

  zorem · Advanced Shipment Tracking for WooCommerce

  High7.2
• CVE-2026-109236

  Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter

  zorem · Customer Email Verification for WooCommerce

  Medium4.8
• CVE-2026-57773

  WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability

  Zorem · Advanced Shipment Tracking for WooCommerce

  High7.6
• CVE-2024-31283

  WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

  zorem · Advanced Local Pickup for WooCommerce

  High7.5
• CVE-2024-32814

  WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability

  Zorem · Advanced Local Pickup for WooCommerce

  Medium5.3
• CVE-2022-40702

  WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control

  Zorem · Advanced Local Pickup for WooCommerce

  Medium5.4
• CVE-2022-38141

  WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

  Zorem · Sales Report Email for WooCommerce

  Medium4.3
• CVE-2023-2841

  Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection

  zorem · Zorem Local Pickup

  High7.2
• CVE-2021-4347

  Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change

  zorem · Advanced Shipment Tracking for WooCommerce

  Critical9.9
• CVE-2022-41635

  WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Zorem · Advanced Shipment Tracking for WooCommerce

  Medium4.3