ZO
Vendor
Zorem
8
CVEs
0
On KEV
1
New 30D
Products
CE4.8
Customer Email Verification for WooCommerce
zorem
1 CVEs0 on KEV1 new
AL9.8
Advanced Local Pickup For Woocommerce
Zorem
3 CVEs0 on KEV0 new
AS8.8
Advanced Shipment Tracking for WooCommerce
Zorem
3 CVEs0 on KEV0 new
SR6.5
Sales Report Email For Woocommerce
Zorem
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109236 New | CE Customer Email Verification for WooCommerce zorem | 4.8 | Oct 28 | Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter |
| CVE-2026-57773 | AS Advanced Shipment Tracking for WooCommerce Zorem | 7.6 | Jul 13 | WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability |
| CVE-2024-31283 | AL Advanced Local Pickup For Woocommerce Zorem | 9.8 | Jun 9 | Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2 |
| CVE-2022-40702 | AL Advanced Local Pickup For Woocommerce Zorem | 4.3 | Jan 17 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.5.2 |
| CVE-2022-38141 | SR Sales Report Email For Woocommerce Zorem | 6.5 | Jan 17 | Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8 |
| CVE-2023-2841 | AL Advanced Local Pickup For Woocommerce Zorem | 7.2 | Nov 22 | The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to… |
| CVE-2021-4347 | AS Advanced Shipment Tracking For Woocommerce Zorem | 6.5 | Jun 7 | The function update_shipment_status_email_status_fun in the plugin Advanced Shipment Tracking for WooCommerce in versions up to 3.2.6 is vulnerable to authenticated arbitrary… |
| CVE-2022-41635 | AS Advanced Shipment Tracking For Woocommerce Zorem | 8.8 | May 25 | Cross-Site Request Forgery (CSRF) vulnerability in Zorem Advanced Shipment Tracking for WooCommerce plugin <= 3.5.2 versions |