Colissimo shipping methods for WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Colissimo shipping methods for WooCommerce

Information

Software Type Plugin
Software Slug colissimo-shipping-methods-for-woocommerce (view on wordpress.org)
Software Status Active
Software Author iscpcolissimo
Software Downloads 392,550
Software Active Installs 10,000
Software Record Last Updated September 14, 2026

4 Vulnerabilities

Submit a Vulnerability
Colissimo shipping methods for WooCommerce <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-66697
Aug 10, 2026
Researcher: Asim Alshaya
Colissimo shipping methods for WooCommerce <= 2.10.0 - Authenticated (Customer+) Insecure Direct Object Reference
4.3
CVE-2026-66692
Jul 29, 2026
Researcher: TurboNexic
Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Modification via lpc_order_affect AJAX action
4.3
CVE-2026-9240
Jul 8, 2026
Researcher: Muhan Luo
Colissimo shipping methods for WooCommerce <= 2.9.0 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2026-57341
Jun 29, 2026
Researcher: HieuPenguinnn
Title Status CVE ID CVSS Researchers Date
Colissimo shipping methods for WooCommerce <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-66697 7.2 Asim Alshaya August 10, 2026
Colissimo shipping methods for WooCommerce <= 2.10.0 - Authenticated (Customer+) Insecure Direct Object Reference Patched CVE-2026-66692 4.3 TurboNexic July 29, 2026
Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order Shipment Modification via lpc_order_affect AJAX action Patched CVE-2026-9240 4.3 Muhan Luo July 8, 2026
Colissimo shipping methods for WooCommerce <= 2.9.0 - Unauthenticated Insecure Direct Object Reference Patched CVE-2026-57341 5.3 HieuPenguinnn June 29, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation