Eshipper vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Eshipper products: 1 record(s), with severity, exploitation and fixes.

eShipper Commerce 1

Exploited only (KEV) →

CVE-2026-39689 Medium · 5.3 CWE-862 Apr 8, 2026

WordPress eShipper Commerce plugin <= 2.16.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in eshipper eShipper Commerce eshipper-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eShipper Commerce: from n/a through <= 2.16.12.