Portugal CTT Tracking for WooCommerce

Portugal CTT Tracking for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Portugal CTT Tracking for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by stealthcopter. Portugal CTT Tracking for WooCommerce is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Portugal CTT Tracking for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-24878

Portugal CTT Tracking for WooCommerce <= 2.1 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Portugal CTT Tracking for WooCommerce banner
Latestv2.6

Portugal CTT Tracking for WooCommerce

Naked Cat Plugins

Author

Naked Cat Plugins

5.0(5)
100/100
Last Updated
2026-08-29 (15d ago)
Active Installs
600+
Downloads
14,922
Requires WP
5.8+
Requires PHP
7.2+
Tested up to
WP 7.0.4
Created
2019-07-26 (7y ago)
Requires Plugins
woocommerce

Shop owners using the Portuguese carrier CTT can use this plugin to associate the tracking code with the WooCommerce order and track it on the order edit screen. Clients will also be able to track the order shipping status on the “My Account” page. Due to changes in CTT’s systems, the tracking information is currently unavailable and can only be accessed through their website. We are working on a workaround but we cannot commit to a deadline. Features: Add a CTT tracking code to the order Shop owner can check the shipping status on the order edit screen, by clicking the CTT link Client can check the delivery status on the order page on My account, by clicking the CTT link Tracking code is added to order emails sent to the client High-Performance Order Storage compatible Block based checkout compatible Do your customers still write the full address details manually on the checkout? Activate the automatic filling of the address details at the checkout, including street name and neighbourhood, based on the postal, avoiding incorrect data at the time of shipping, with our plugin Portuguese Postcodes for WooCommerce Are you already issuing automatic invoices on your WooCommerce store? If not, get to know our new plugin: Invoicing with InvoiceXpress for WooCommerce Other (premium) plugins Already know our other WooCommerce (premium) plugins? VAT Number and EU VIES Validation for WooCommerce – Collect and validate VAT identification numbers for the whole European Union, confirm them against VIES and remove VAT on qualifying intra-EU B2B orders Portuguese Postcodes for WooCommerce – Automatic filling of the address details at the checkout, including street name and neighbourhood, based on the postal code Invoicing with InvoiceXpress for WooCommerce – Automatically issue invoices directly from the WooCommerce order DPD Portugal for WooCommerce – Create shipping and return guide in the DPD webservice directly from the WooCommerce order Feed KuantoKusta for WooCommerce – Publish your products on Kuanto Kusta with this easy to use feed generator Simple WooCommerce Order Approval – The hassle-free solution for WooCommerce order approval before payment Shop as Client for WooCommerce – Quickly create orders on behalf of your customers Taxonomy/Term and Role based Discounts for WooCommerce – Easily create bulk discount rules for products based on any taxonomy terms (built-in or custom) DPD / SEUR / Geopost Pickup and Lockers network for WooCommerce – Deliver your WooCommerce orders on the DPD and SEUR Pickup network of Parcelshops and Lockers in 9 European countries

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C