wpexpertshub

Products

ProductCVEsExploitedLatest
Partial Shipment for WooCommerce1–Sep 19, 2026

Exploited and recent CVEs

  • CVE-2026-9858 Medium 4.3 Partial Shipment for Woocommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Modification via wxp_order_shipment, wxp_order_item_shipment, and wxp_order_set_shipped AJAX Actions 0.4%