richardperdaan MyParcel

• CVE-2026-8678 Medium 4.3 MyParcel <= 4.25.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Data Disclosure and Modification via wcmp_get_shipment_options and wcmp_save_shipment_options AJAX Actions 0.4%
• CVE-2024-9608 Medium 6.1 MyParcel <= 4.24.1 - Reflected Cross-Site Scripting 0.3%