Colissimo for WooCommerce <=2.9.0 Missing Authorization: Arbitrary Order Shipment Modification via AJAX

www.wordfence.com 2026-07-10查看中文 →

Security AdvisoryCVE-2026-9340MediumWooCommerce

Affected:

Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0

Fixed in:

2.1.0

Referenced CVEs: CVE-2026-9240 · 4.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

YonYou GRP-U8 SQL Injection Vulnerability with POC Code 2026-07-20 Apache ActiveMQ CVE-2024-23897 RCE Vulnerability Advisory with POC 2026-07-20 CVE-2017-16936: 360Safe.exe Remote Code Execution Vulnerability with PoC 2026-07-20 CVE-2026-15407: Themify Builder Auth-Bypass via tb_generate_on_fly Action 2026-07-19 W3SC Elementor to Zoho CRM <= 2.2.0 CSRF Vulnerability CVE-2026-9734 2026-07-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive