Vulnerabilities and security researches forwc-ukr-shipping wc-ukr-shipping
Direction: ascendingSep 05, 2026
WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce # CVE-2026-84836
- CVE, Research URL
- Home page URL
- Application
-
WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce
- Date
- Sep 03, 2026
- Research Description
- Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
- Affected versions
-
max 1.22.3.
- Status
-
vulnerable
Oct 07, 2026
WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce # CVE-2026-103337
- CVE, Research URL
- Home page URL
- Application
-
WC Nova Poshta Shipping – Integration of Nova Poshta delivery service for WooCommerce
- Date
- Oct 06, 2026
- Research Description
- Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2.
- Affected versions
-
max 1.23.3.
- Status
-
vulnerable