Zorem Advanced Shipment Tracking For Woocommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Zorem Advanced Shipment Tracking For Woocommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-4347 — CVSS 9.9 (critical): The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is…
• CVE-2022-41635 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions.