Biteship
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo | 2 | – | Feb 5, 2024 |
| Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship | 1 | – | Jul 18, 2025 |
Exploited and recent CVEs
- CVE-2025-5816 Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details 0.3%
- CVE-2024-24866 WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-49767 WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS) 0.4%