Epeken All Kurir for Woocommerce

Epeken All Kurir for Woocommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each. Epeken All Kurir for Woocommerce is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage50%
Open

2

Fixed

2

Get automatic notifications for all Epeken All Kurir for Woocommerce vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-32673

Epeken All Kurir <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records
Plugin Profile
Latestv2.1.5

Epeken All Kurir for Woocommerce

epeken

Author

epeken

4.7(24)
94/100
Last Updated
2026-09-09 (4d ago)
Active Installs
400+
Downloads
75,253
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2015-07-13 (11y ago)

Epeken All Kurir for WooCommerce is a wordpress plugin for woocommerce to enable shipping methods featuring many shipping companies in Indonesia for Indonesia e-commerce. This plugin is useful for woocommerce users in Indonesia. However, you need to have license to use this plugin and subscribe to our shipping data. Get your valid anual or monthly license to continue using this plugin. This plugin is compatible with mainstream multi vendor plugins such as Woocommerce Product Vendors, wc-vendors , MultiVendorX, Yith Woocommerce Multi Vendor, woocommerce-dropshippers, Woocommerce Multivendor Marketplace and Dokan if you want to build marketplace ecommerce based on wordpress and woocommerce. This plugin is also compatible with multi inventories plugins. Currently companies, that are supported by this plugin are JNE, TIKI, POS Indonesia, J&T, SICEPAT, WAHANA, LION PARCEL, NINJA EXPRESS, JNE TRUCKING, Anteraja, SAPX, DHL Express Try Our Demo or check our website Strength & flexibility This plugin is built using WordPress best practises both on the front and the back end. This results in an efficient, robust and intuitive plugin. Currently this plugin supports latest version of woocommerce and wordpress. Customizable Your business is unique, you may modify this plugin to meet your business requirement. You may refer to woocommerce plugin customization page and wordpress plugin development page to do it. Any concerns and questions, you may submit them and contact us : support@epeken.com or chat

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C