Extension WordPress
Vulnérabilités Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship
Cette page rassemble les failles publiées pour Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship
3 fiches
Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 – Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details
The Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.0 via the get_order_detail() due to missing validation on a user…
*-3.2.0
Non indiqué
17/07/2025
Biteship <= 2.2.24 – Reflected Cross-Site Scripting via biteship_error and biteship_message
The Biteship plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'biteship_error' and 'biteship_message' parameters in versions up to, and including, 2.2.24 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-2.2.24
2.2.25
02/02/2024
Biteship <= 2.2.27 – Authenticated (Shop manager+) Stored Cross-Site Scripting
The Biteship plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in versions up to, and including, 2.2.27 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with shop…
*-2.2.27
2.2.28
04/12/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.