WordPress plugin
Shipmozo Courier Tracking security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Shipmozo Courier Tracking vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0No patch available | CVE-2025-27293 |
- Medium6.1Reflected Cross-Site Scripting
≤1.0No patch available
Shipmozo Courier Tracking: common questions
Does Shipmozo Courier Tracking have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Shipmozo Courier Tracking: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Shipmozo Courier Tracking I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Shipmozo Courier Tracking vulnerability?
CVE-2025-27293, published Feb 21, 2025: Shipmozo Courier Tracking <= 1.0 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Shipmozo Courier Tracking vulnerability listed in CISA KEV?
No. None of the known Shipmozo Courier Tracking vulnerabilities is currently listed in the CISA KEV catalog.