Estonian Shipping Methods for WooCommerce
Estonian Shipping Methods for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Estonian Shipping Methods for WooCommerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Legion Hunter. Estonian Shipping Methods for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-58656Estonian Shipping Methods for WooCommerce <= 1.7.2 - Unauthenticated Sensitive Information Exposure
Read the full analysisVulnerability Records
Estonian Shipping Methods for WooCommerce
Author
Risto Niinemets
This plugin consists of several Estonian shipping methods: DPD package shops (Estonia, Latvia, Lithuania) Omniva parcel terminals (Estonia, Latvia, Lithuania) Omniva post offices (Estonia) SmartPOST parcel terminals (Estonia, Finland, Latvia, Lithuania) SmartPOST courier Cleveron Office packrobots (Estonia) Supports WPML for multilingual sites. Current translations: English (props @ristoniinemets) Estonian (props @ristoniinemets) Latvian Lithuanian (props @DomasWEB) Russian (props @avramchuk) Code is maintained and developed at Github. Contributions and discussions are very welcome at Github
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C