advanced_shipment_tracking_for_woocommerce vulnerabilities

CVEs whose affected-version data names the advanced_shipment_tracking_for_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120558High· 7.2

3d ago

Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter

The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tracking_provider` parameter of the `POST /wp-json/wc-ast/v3/orders/<order_id>/shipment-trackings` REST endpoint in all versions …

▾ Twilightzorem · Advanced Shipment Tracking for WooCommerceEPSS 0.35%via CVEORG