Unknown InPost PL

• CVE-2026-93580 Medium 5.3 InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook 0.2%
• CVE-2026-9702 High 7.5 InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking 0.4%