TMS-Plugins — Vulnerabilities & Security Advisories 5

TMS-Plugins develops WordPress extensions for transportation and logistics management, primarily serving e-commerce platforms with shipping and delivery tracking functionality. Historically, the plugins have been vulnerable to multiple remote code execution (RCE) and cross-site scripting (XSS) flaws, often stemming from insufficient input validation and improper privilege checks. The five recorded CVEs include critical authentication bypass issues and stored XSS vulnerabilities that could allow attackers to compromise administrative accounts or inject malicious scripts. While no major public incidents have been documented, the consistent pattern of high-impact vulnerabilities suggests these plugins require careful configuration and regular updates to mitigate security risks.