Plugin icon

MyParcel

woocommerce-myparcel

Vulnerabilities:

2

Last Updated:

August 11, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-07-10
Title
MyParcel < 4.25.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_options and wcmp_save_shipment_options AJAX Actions
Fixed in
Fixed in 4.25.2
CVSS
4.3 (medium)
Published
2024-12-12
Title
MyParcel < 4.24.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.24.2
CVSS
6.1 (medium)