Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-11
Cargo Shipping Location for WooCommerce - Security Vulnerability (CVE-2026-106025)
The Cargo Shipping Location for WooCommerce WordPress plugin before 6.0 does not properly restrict access to a REST API endpoint that updates order shipment statuses, relying on an attacker-controllable value for authorization, allowing unauthenticated users to manipulate order statuses and shipment metadata.
PLUGIN
Cargo Shipping Location for WooCommerce
CVE-2026-106025
Risk Score
Threat Entry
Updated 2026-06-17
Cargo Shipping Location For Woocommerce - SQL Injection (CVE-2026-54815)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cargo RD Cargo Shipping Location for WooCommerce allows Blind SQL Injection. This issue affects Cargo Shipping Location for WooCommerce: from n/a through 5.6.
PLUGIN
Cargo Shipping Location For Woocommerce
CVE-2026-54815
Risk Score