Kirillbdev vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kirillbdev products: 2 record(s), with severity, exploitation and fixes.

WC Ukraine Shipping 2

Exploited only (KEV) →

CVE-2026-103337 Medium · 6.5 CWE-862 Oct 5, 2026

WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2.

CVE-2026-84836 High · 7.1 CWE-639 Sep 3, 2026

WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.