Datalogics Ecommerce Delivery – Datalogics

Datalogics Ecommerce Delivery – Datalogics has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Improper Privilege Management, behind 1 of the records (50%). Other recurring categories include Incorrect Privilege Assignment.

Every one of the 2 issues recorded for Datalogics Ecommerce Delivery – Datalogics has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Datalogics Ecommerce Delivery – Datalogics is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSCritical
9.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Datalogics Ecommerce Delivery – Datalogics vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-39583

Datalogics Ecommerce Delivery – Datalogics <= 2.6.62 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

2 records
Datalogics Ecommerce Delivery – Datalogics banner
Latestv2.6.66

Datalogics Ecommerce Delivery – Datalogics

Datalogics

Author

Datalogics

5.0(1)
100/100
Last Updated
2026-05-28 (4mo ago)
Active Installs
500+
Downloads
8,008
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 6.8.8
Created
2025-04-28 (1y ago)

Datalogics Ecommerce Delivery enables seamless syncing of your WooCommerce orders with a variety of delivery companies, automating the entire shipping process. Supported Shipping Companies All companies who are using Baldar All companies who are using Run Chita HFD Negev Tapuz Tamnun SPEEDWAY KATZ YDM Rimon KEXPRESS Kal Kanesher Shipping TS delivery ISGAV Davar Rishon YDM CARGO Sosna Buzzer ZigZag Sdeliveries Zip Delivery Ey Delivery Didn’t see your courier service listed? No problem! Contact us, and we’ll add your preferred shipping company. Datalogics Ecommerce Delivery – Seamlessly Sync Your WooCommerce Orders with All Delivery Services Datalogics Ecommerce Delivery is your go-to solution for automating the shipping process of your WooCommerce store. This plugin allows you to sync your orders with a wide range of delivery companies, streamlining your shipping operations. Plugin Features Standard Delivery (Door to Door): Easily manage regular deliveries straight to your customers’ doors. Reverse Delivery: Simplify the process of returning items from customers back to your location. Govina Delivery: Handle complex shipping scenarios involving multiple destinations, including receiving payments from customers. Double Shipping: Manage complex shipping scenarios involving multiple destinations. Bulk Shipment Creation: Efficiently create multiple shipments at once. Pickup Point Collection – Map Selection: Allow customers to choose pickup points via an interactive map (Google Maps supported). Pickup Point Collection – List Selection: Offer a list-based selection of pickup points for customers. Shipping Label Printing: Generate and print shipping labels with just a few clicks. Bulk Shipping Label Printing: Bulk generate and print shipping labels with just a few clicks. Delivery Status Updates: Receive real-time updates on the status of deliveries. Delivery Cancellation: Cancel shipments directly from your WooCommerce dashboard. Setting Up an Account Need help with installation? Check out our Plugin Installation Guide. External Services This plugin integrates with external services to provide its functionality. Below are the details of the third-party services used by the plugin: 1. Datalogics Platform API Service Description: This plugin connects to the Datalogics Platform API to manage shipping processes, including order registration and label generation. Data Sent: – Account creation: There is a registraion form to create your account in Datalogics. – Order Data: Each time an order is added or updated, the corresponding order data is sent. Conditions for Data Transmission: – Data is sent when the user interacts with the plugin to register an order or generate a shipping label. Terms of Service and Privacy Policy: – Datalogics Terms of Service – Datalogics Privacy Policy 2. Shipping Label Generation Service Description: This service is used to generate shipping labels for orders processed through the Datalogics platform. Data Sent: – Label Request: When a shipment is created, the plugin sends the order ID and any other necessary data to the Datalogics platform to generate a shipping label. Conditions for Data Transmission: – Data is transmitted each time a shipping label is requested. Terms of Service and Privacy Policy: – Datalogics Terms of Service – Datalogics Privacy Policy 3. Google Maps JavaScript API Service Description: The Google Maps JavaScript API provides address autocomplete functionality to help users input and validate shipping addresses. Data Sent: Address Data: When a user types in an address field, the partial or complete address is sent to Google’s servers to retrieve autocomplete suggestions. Metadata: The API may collect the user’s IP address and browser information as part of standard HTTP requests. When Data is Sent: Data is sent only when a user interacts with an address input field that uses the autocomplete feature (e.g., during checkout or in the plugin’s shipping settings). No data is sent if the feature is not used or if the Google Maps API key is not configured. Terms of Service: Google Maps Platform Terms of Service Privacy Policy: Google Privacy Policy Additional Information All requests to the Datalogics Platform API are made using secure HTTPS protocols to ensure data protection.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C