richardperdaan

Products

ProductCVEsExploitedLatest
MyParcel2–Jul 11, 2026

Exploited and recent CVEs

  • CVE-2026-8678 Medium 4.3 MyParcel <= 4.25.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_options and wcmp_save_shipment_options AJAX Actions 0.4%
  • CVE-2024-9608 Medium 6.1 MyParcel <= 4.24.1 - Reflected Cross-Site Scripting 0.3%