bpost-shipping-platform
bpost-shipping-platform has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for bpost-shipping-platform has a vendor fix available, so running the current release closes it.
All of these findings were reported by bapcorn. bpost-shipping-platform is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-8082Bpost Shipping Platform <= 3.2.2 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records
bpost-shipping-platform
Author
bpost
Please note that this plugin relies on external Bpost services for shipping label generation and rate calculation. User data (such as order details) will be sent to Bpost for processing. Streamline your shipping process with intelligent automation. Save time using filters that automatically generate shipping labels for specific orders. Now available for both large (contract) and small (SME) plans. Benefit from a dedicated Account Manager with a large plan and enjoy competitive rates tailored to your business needs. Features -Automatic creation of shipping labels -Shipping labels for Belgium & worldwide home addresses -Shipping labels towards Pick-up Points and Parcel lockers -Extra options: warranty, signature and Saturday delivery in Belgium -Follow the status of your parcels through the platform Screenshots Shipping zones preview Order grid preview Template for setting up of the bpost free shipping method Template for setting up of the bpost flat rate shipping method External services ** Bpost ** – To enable you to create labels for your orders via this integration we send shipping data (shipping address, order item list, shipping method name) to the bpost API. https://pluginsapi.bpost.be/v3/ ** Google Maps API ** – This plugin uses Google Maps API to display pickup locations on an interactive map. The following data is sent to Google Maps API: – User’s location (when searching for nearby pickup points) – Pickup point addresses – Map center coordinates This service is used to help customers locate and select their preferred pickup points during checkout. Google Maps API Terms of Service: https://developers.google.com/maps/terms Google Maps API Privacy Policy: https://policies.google.com/privacy WooCommerce Weight Based Shipping – if you are using this plugin, we integrate with it so we can still send the shipping method name.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C