Zorem
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Shipment Tracking for WooCommerce | 4 | – | Nov 3, 2026 |
| Advanced Local Pickup for WooCommerce | 3 | – | Jun 9, 2024 |
| Customer Email Verification for WooCommerce | 1 | – | Oct 28, 2026 |
| Sales Report Email for WooCommerce | 1 | – | Jan 17, 2024 |
| Zorem Local Pickup | 1 | – | Nov 22, 2023 |
Exploited and recent CVEs
- CVE-2026-120558 Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter 0.3%
- CVE-2026-109236 Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter 0.3%
- CVE-2026-57773 WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability 0.4%
- CVE-2024-31283 WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability 0.4%
- CVE-2024-32814 WordPress Advanced Local Pickup for WooCommerce plugin <= 1.6.1 - Broken Access Control vulnerability 0.3%
- CVE-2022-40702 WordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control 0.4%
- CVE-2022-38141 WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control 0.4%
- CVE-2023-2841 Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection 0.8%
- CVE-2021-4347 Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change 0.7%
- CVE-2022-41635 WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%