WordPress plugin
DHL eCommerce (Benelux) for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All DHL eCommerce (Benelux) for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Arbitrary Shipping Label Creation and Deletion via dhlpwc_label_create and dhlpwc_label_delete AJAX Actions ≤2.2.3Update to 2.2.4 | CVE-2026-9235 |
DHL eCommerce (Benelux) for WooCommerce: common questions
Does DHL eCommerce (Benelux) for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in DHL eCommerce (Benelux) for WooCommerce: 1 medium. None are known to affect version null.
How do I check which version of DHL eCommerce (Benelux) for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent DHL eCommerce (Benelux) for WooCommerce vulnerability?
CVE-2026-9235, published Jul 8, 2026: DHL eCommerce (Benelux) for WooCommerce <= 2.2.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shipping Label Creation and Deletion via dhlpwc_label_create and dhlpwc_label_delete AJAX Actions. Severity: Medium (CVSS 4.3).
Is any DHL eCommerce (Benelux) for WooCommerce vulnerability listed in CISA KEV?
No. None of the known DHL eCommerce (Benelux) for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.