DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce

DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Psai. DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-27001

Shipmondo – A complete shipping solution for WooCommerce <= 5.0.3 - Missing Authorization to Authenticated (Customer+) Information Disclosure

Read the full analysis

Vulnerability Records

1 records
DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce banner
Latestv5.0.8

DEPRECATED – Shipmondo – A complete shipping solution for WooCommerce

Shipmondo

Author

Shipmondo

3.0(8)
60/100
Last Updated
2026-01-27 (8mo ago)
Active Installs
5,000+
Downloads
163,671
Requires WP
6.2+
Requires PHP
7.4+
Tested up to
WP 6.7.7
Created
2016-09-05 (10y ago)

Important: This plugin is now deprecated and will no longer be supported. To get access to new features, you should migrate to our new plugin. The new plugin can be found here: https://wordpress.org/plugins/shipmondo-for-woocommerce/ and the migration guide here Offer different delivery options in your checkout and handle your freight booking efficiently. Take your cargo to the next level. Let your customers choose a specific pick-up point from a list of the closest ones based on postcode. Set up shipping rules and delivery methods based on order amount, order weight, zip codes or number of items. Let your customers decide where, when, and how they want their parcel to be delivered. With Shipmondo Delivery Checkout you can, among other things, fix the shipping price according to different variables, offer free delivery, and let your customers choose between several carriers. You can also offer Click and Collect, and let your customers collect their orders at your doorstep. Create a free integration with Shipmondo, and get a complete and automated flow to handle shipping and orders. Manage your orders, shipping, and customs frictionlessly in a setup, where you can mass-create shipments and print shipping labels efficiently. Functions Access to multiple carriers in one plugin A list of nearest pick-up points Google Maps map of nearest delivery locations Delivery locations in several countries including: Denmark, Norway, Sweden, Finland, the Netherlands, Germany, Belgium and Luxembourg Shipping information stored on the order Complete order, customs, and freight solutions. Minimize time per order Supports multi-site stores Supports free shipping when using coupons Option to offer a “free shipping for orders over x-order amount.” function Option to set the shipping price based on the total weight/price/number of items in the shopping cart Offer local pick-up, Click and Collect Supported Carriers for Parcel-shop Collection Bring dao GLS PostNord DHL DB Schenker Other All Supported Carriers Airmee, Best Transport, Bring, Brink Transport, bPost, Budbee, Burd, DASCHER, Danske Fragtmænd, dao, Deutsche Post, DHL, Doorhub, DPD, DSV, Early Bird, FedEx, FREJA, GLS, helthjem, PostNord, Posti, PostNL, Swipbox, TNT, UPS, Xpressen, B2C Europe, Blue Water Shipping, Interfjord, GEODIS, United Broker, NTG and many more… See all: https://shipmondo.com/carriers/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C