Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce
Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Bao - BlueRock. Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.
CVE-2025-57949Ongkoskirim.id <= 1.0.6 - Missing Authorization
Read the full analysisVulnerability Records
Plugin Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for Woocommerce
Author
oggix
OngkosKirim.id merupakan plugin tambahan untuk woocommerce yang berfungsi untuk menghitung ongkos kirim dari berbagai ekspedisi di Indonesia, mulai dari JNE, Tiki, Pos, J&T, Sicepat dan Wahana. Plugin ini sangat mudah digunakan, hanya cukup sekali klik dan anda siap berjualan ke seluruh pelosok negri. Features Free Version Ongkos Kirim Real-Time Seluruh Indonesia Ongkir kirim JNE, TIKI, POS, J&T, Sicepat, Wahana Data kota dari basis kota pengiriman Anda ke Seluruh Indonesia Checkout Provinsi, Kota, Kecamatan saling terkait Fitur Kalkulasi Ongkir di Halaman Cart Terintegrasi Dengan Woo Commerce Fitur Ongkos Kirim Tambahan Angka Unik Transaksi Ongkos Kirim Hingga Kecamatan Multiple Currency Mudah di Install & Digunakan Multi Bahasa Gratis update dan Dukungan Teknis Profesional Features PRO Version Semua fitur di Free Version Ongkos kirim JNE YES, TIKI ONS, Sicepat BEST Upgrade ke PRO version
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C