CTT Expresso para WooCommerce

CTT Expresso para WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.1, and the most serious one scores 5.5 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 3 issues recorded for CTT Expresso para WooCommerce has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. CTT Expresso para WooCommerce is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium

5.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all CTT Expresso para WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2022-47589

CTT Expresso para WooCommerce <= 3.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2024-07-31 00:00	CTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory CTT Expresso para WooCommerce <= 3.2.12	`CVE-2024-6687`	5.3 Medium	Ricardo Silva (Thrill-sea-ker)	Yes
2024-06-01 00:00	CTT Expresso para WooCommerce <= 3.2.12 - Authenticated (Admin+) Stored Cross-Site Scripting CTT Expresso para WooCommerce <= 3.2.12	`CVE-2024-6478`	4.4 Medium	Bob Matyas	Yes
2023-01-20 00:00	CTT Expresso para WooCommerce <= 3.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting CTT Expresso para WooCommerce <= 3.2.11	`CVE-2022-47589`	5.5 Medium	TEAM WEBoB of BoB 11th	Yes

Showing 1–3 of 3 reports

Latestv3.2.13

CTT Expresso para WooCommerce

Author

Limpinho

4.5(4)

90/100

Last Updated

2024-07-29 (2y ago)

Active Installs

90+

Downloads

10,535

Requires WP

4.6.1+

Requires PHP

7.1+

Tested up to

WP 6.6.7

Created

2020-02-06 (7y ago)

This plugin is only for those who have hired CTT Expresso pick up/drop off services. This is not a shipping method but, it’s an add-on for any WooCommerce shipping method you activate it on. It can be used in two ways: Print Using CTT Expresso Portal: When an order is marked as completed, it automatically does 3 things: Creates an order in CTT Expresso Portal; Includes the tracking number and link in WooCommerce completed order email; Also shows the tracking number in the order itself. It’s necessary to access CTT Expresso Portal to fullfill the orders; Print on My Website: When an order is marked as completed, it does all the actions listed in option 1 and also makes available the order documents to download, print and request pickups, with no need to access CTT Expresso Portal afterwards; In both scenarios, the plugin also adds a CTT Expresso option in the Shipping Methods, so you can choose where to make CTT Expresso available. Important: You must have weights in grams in all your products. This is not an official CTT Expresso plugin, but their support was obtained during its development. The CTT Expresso logo and brand is copyrighted, belongs to them and is used with their permission.

View on WordPress.org