Unknown SmartyParcel

• CVE-2026-107789 Medium 5.3 SmartyParcel < 1.23.4 - Unauthenticated Shipping Label Disclosure via IDOR 0.3%
• CVE-2026-107788 Medium 4.3 SmartyParcel (WC Ukr Shipping) < 1.23.4 - Subscriber+ Arbitrary Shipping Label Deletion 0.2%