WordPress plugin
Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details ≤3.2.0No patch available | CVE-2025-5816 | |
| Medium6.1 | Reflected Cross-Site Scripting via biteship_error and biteship_message ≤2.2.24Update to 2.2.25 | CVE-2024-24866 | |
| Medium5.5 | Authenticated (Shop manager+) Stored Cross-Site Scripting ≤2.2.27Update to 2.2.28 | CVE-2023-49767 |
- Medium4.3Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details
≤3.2.0No patch available
- Medium6.1Reflected Cross-Site Scripting via biteship_error and biteship_message
≤2.2.24Update to 2.2.25
- Medium5.5Authenticated (Shop manager+) Stored Cross-Site Scripting
≤2.2.27Update to 2.2.28
Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship: common questions
Does Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship vulnerability?
CVE-2025-5816, published Jul 17, 2025: Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details. Severity: Medium (CVSS 4.3).
Is any Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship vulnerability listed in CISA KEV?
No. None of the known Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship vulnerabilities is currently listed in the CISA KEV catalog.