Moova

Moova has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Moova has a vendor fix available, so running the current release closes it.

All of these findings were reported by p7e4. Moova is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 0.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Moova vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2021-34664

Moova for WooCommerce <= 3.5 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2021-08-13 15:31	Moova for WooCommerce <= 3.5 - Reflected Cross-Site Scripting Moova <= 3.5	`CVE-2021-34664`	6.1 Medium	p7e4	Yes

Showing 1–1 of 1 reports

Latestv7.3

Moova

Author

moova

5.0(1)

100/100

Last Updated

2025-11-20 (10mo ago)

Active Installs

10+

Downloads

10,713

Requires WP

6.5+

Requires PHP

7.0+

Tested up to

WP 0

Created

2020-01-10 (7y ago)

Integrate with Moova to get same-day shipping at affordable rates. This extension allows clients from Uruguay, Argentina, Mexico, Chile, Peru, Guatemala, and Panama to automate their shippings. The main features: Live Shipping Rate: Based on the product weight, box dimensions, shipping origin, destination, etc., this plugin fetches Moova rates for shipping services. Real-time tracking: We provide a tracking number that enables your client to see all the shipping status from our website. We also notify all the shipping status to your store. Shipments in 24 hours: Improve the user experience by enabling our 24-hour shipping. We give a label for all shippings automatically and ready to print.

View on WordPress.org