MultiParcels Shipping For WooCommerce
MultiParcels Shipping For WooCommerce has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2023 was the busiest year with 6 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (44%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 9 issues recorded for MultiParcels Shipping For WooCommerce has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, most of them (4) reported by Erwan LR. MultiParcels Shipping For WooCommerce is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-2843MultiParcels Shipping For WooCommerce <= 1.14.12 - Authenticated(Subscriber+) SQL Injection via id
Read the full analysisVulnerability Records
MultiParcels Shipping For WooCommerce
Author
multiparcels
Main features Add pickup point selector to the checkout Hide city, postal code and address fields when delivering to pickup locations Hide city, postal code and address fields when customer chooses “Local pickup” Display carrier logos near shipping methods Create shipping labels for all carriers in one place Send tracking code to the customer (also we support Omnisend) Automatic shipping label creation Automatic pickup locations update Easy way to integrate carriers with all deliveries methods to create shipments with just a few button clicks. Try for free! More features COD (paying in cash or with bank card on order delivery) service Free shipping option Shows only possible locations for customer’s city Selected pickup location preview on email Display selected pickup location on Google maps Display shipping methods only on specific days/time Multiple sending locations/multiple warehouses Easy to change pickup point selector location Easy to get selected pickup point information for invoices etc. with code Ongoing Warehouse support Carriers InPost DPD Poland Venipak (Lithuania/Latvia/Estonia) + GLS/TNT LP Express / LPExpress / lpexpress.lt Lithuania POST / Lietuvos paštas / post.lt Latvian POST / expresspasts / expresspasts / pasts / pasts.lv UPS / UPS SurePost DHL Express TNT FedEx Parcel / LTL Freight Deutsche Post International / DHL Global Mail / deutschepost.com GLS Hermes World / Hermes Border-guru Hermes UK / MyHermes DPD (Lithuania/Latvia/Estonia) Posti Itella SmartPOST by Itella Zipas Go Siuntos autobusais DB Schenker Omniva (Lithuania/Latvia/Estonia) Pickup points InPost (Poland) DPD (Poland) LP Express (Lithuania) Omniva (Lithuania, Latvia, Estonia) Unisend Venipak (Lithuania, Latvia, Estonia) Itella (Finland, Lithuania, Latvia, Estonia) Posti (Finland, Lithuania, Latvia, Estonia) SmartPOST by Itella (Finland, Estonia) DPD (Lithuania, Latvia, Estonia) Latvian post (Latvia, Lithuania) Zipas Go (Lithuania, Latvia, Estonia, Poland) Supported checkouts Default WooCommerce checkout WooCommerce One Page Checkout CheckoutWC AeroCheckout Rey theme checkout Always free shipping methods MultiParcels guarantees different delivery options – terminal/pickup point – selection for free! Always free: Terminals Pickup points Supported YITH WooCommerce Product Bundles WPC Product Bundles for WooCommerce WooCommerce PDF Invoices & Packing Slips by Ewout Fernhout (display carrier and selected pickup location on invoice) Created for you, by MultiParcels – MultiSiuntos
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C