Parcel Tracker eCourier

Parcel Tracker eCourier has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Parcel Tracker eCourier has a vendor fix available, so running the current release closes it.

All of these findings were reported by WPScanTeam. The current release is tested up to WordPress 5.7.17.

Strategic Overview

Avg CVSSHigh

8.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Parcel Tracker eCourier vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Parcel Tracker eCourier <= 1.0.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2021-05-05 00:00	Parcel Tracker eCourier <= 1.0.1 - Cross-Site Request Forgery Parcel Tracker eCourier <= 1.0.1	`N/A`	8.8 High	WPScanTeam	Yes

Showing 1–1 of 1 reports

Latestv1.0.2

Parcel Tracker eCourier

Author

Simon Gomes

0.0(0)

0/100

Last Updated

2021-05-05 (5y ago)

Active Installs

Downloads

1,306

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 5.7.17

Created

2021-04-19 (6y ago)

A simple WordPress plugin to give your customer an user friendly and simple interface to track their parcel status from your WordPress website. Privacy Policy Parcel Tracker eCourier uses Appsero SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster & make product improvements. Appsero SDK does not gather any data by default. The SDK only starts gathering basic telemetry data when a user allows it via the admin notice. We collect the data to ensure a great user experience for all our users. Integrating Appsero SDK DOES NOT IMMEDIATELY start gathering data, without confirmation from users in any case. Learn more about how Appsero collects and uses this data.

View on WordPress.org