bpost-shipping-platform

bpost-shipping-platform has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is SQL Injection, behind 1 of the records (100%).

The one issue recorded for bpost-shipping-platform has a vendor fix available, so running the current release closes it.

All of these findings were reported by bapcorn. bpost-shipping-platform is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all bpost-shipping-platform vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2026-8082

Bpost Shipping Platform <= 3.2.2 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv3.2.5

bpost-shipping-platform

bpost

Author

bpost

5.0(1)
100/100
Last Updated
2026-09-04 (9d ago)
Active Installs
400+
Downloads
4,330
Requires WP
4.9+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2025-05-22 (1y ago)

Please note that this plugin relies on external Bpost services for shipping label generation and rate calculation. User data (such as order details) will be sent to Bpost for processing. Streamline your shipping process with intelligent automation. Save time using filters that automatically generate shipping labels for specific orders. Now available for both large (contract) and small (SME) plans. Benefit from a dedicated Account Manager with a large plan and enjoy competitive rates tailored to your business needs. Features -Automatic creation of shipping labels -Shipping labels for Belgium & worldwide home addresses -Shipping labels towards Pick-up Points and Parcel lockers -Extra options: warranty, signature and Saturday delivery in Belgium -Follow the status of your parcels through the platform Screenshots Shipping zones preview Order grid preview Template for setting up of the bpost free shipping method Template for setting up of the bpost flat rate shipping method External services ** Bpost ** – To enable you to create labels for your orders via this integration we send shipping data (shipping address, order item list, shipping method name) to the bpost API. https://pluginsapi.bpost.be/v3/ ** Google Maps API ** – This plugin uses Google Maps API to display pickup locations on an interactive map. The following data is sent to Google Maps API: – User’s location (when searching for nearby pickup points) – Pickup point addresses – Map center coordinates This service is used to help customers locate and select their preferred pickup points during checkout. Google Maps API Terms of Service: https://developers.google.com/maps/terms Google Maps API Privacy Policy: https://policies.google.com/privacy WooCommerce Weight Based Shipping – if you are using this plugin, we integrate with it so we can still send the shipping method name.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C