Plugin icon

Partial Shipment for WooCommerce

wc-partial-shipment

Vulnerabilities:

2

Last Updated:

August 14, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-09-18
Title
Partial Shipment for Woocommerce < 3.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Modification via wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX Actions
Fixed in
Fixed in 3.5
CVSS
4.3 (medium)
Published
2025-06-11
Title
Woocommerce Partial Shipment < 3.3 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 3.3
CVSS
6.5 (medium)