Vendor

    Zorem

    10 known vulnerabilities in products by Zorem, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zorem
    CriticalCVE-2021-4347

    Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change

    		9.9
    HighCVE-2026-120558

    Zorem Advanced Shipment Tracking for WooCommerce: SQL Injection

    		7.2
    HighCVE-2026-57773

    WordPress Advanced Shipment Tracking for WooCommerce plugin <= 4.0 - SQL Injection vulnerability

    		7.6
    HighCVE-2023-2841

    Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection

    		7.2
    MediumCVE-2026-109236

    Zorem Customer Email Verification for WooCommerce: Improper Authentication

    		4.8
    CriticalCVE-2024-31283

    WordPress Advanced Local Pickup for WooCommerce plugin <=1.6.2 - Broken Access Control vulnerability

    		7.5
    MediumCVE-2022-40702

    Zorem Advanced Local Pickup for WooCommerce: Missing Authorization

    		5.4
    MediumCVE-2024-32814

    Zorem Advanced Local Pickup for WooCommerce: Missing Authorization

    		5.3
    MediumCVE-2022-38141

    WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

    		4.3
    HighCVE-2022-41635

    Zorem Advanced Shipment Tracking for WooCommerce: Cross-Site Request Forgery (CSRF)

    		4.3

    Products

    Products by Zorem
    Advanced Local Pickup For Woocommerce60
    Advanced Shipment Tracking For Woocommerce60