Plugin icon

InPost PL

inpost-for-woocommerce

Vulnerabilities:

3

Last Updated:

October 13, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-28
Title
InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
Fixed in
Fixed in 1.9.8
CVSS
5.3 (medium)
Published
2026-06-04
Title
InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking
Fixed in
Fixed in 1.9.1
CVSS
7.5 (high)
Published
2024-08-16
Title
InPost for WooCommerce <= 1.4.0 and InPost PL <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary File Read and Delete
Fixed in
Fixed in 1.4.5
CVSS
10 (critical)