Posti Shipping

Posti Shipping has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Generation Of Error Message Containing Sensitive Information.

Every one of the 3 issues recorded for Posti Shipping has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Posti Shipping is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Posti Shipping vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-10832

Posti Shipping <= 3.10.3 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2024-12-14 00:00	Posti Shipping <= 3.10.3 - Cross-Site Request Forgery Posti Shipping <= 3.10.3	`CVE-2024-56005`	4.3 Medium	thiennv	Yes
2024-12-03 14:18	Posti Shipping <= 3.10.3 - Reflected Cross-Site Scripting Posti Shipping <= 3.10.3	`CVE-2024-10832`	6.1 Medium	vgo0	Yes
2024-11-28 00:00	Posti Shipping <= 3.10.2 - Full Path Disclosure Posti Shipping <= 3.10.2	`CVE-2024-50512`	5.3 Medium	Fariq Fadillah Gusti Insani (fariqfgi)	Yes

Showing 1–3 of 3 reports

Latestv3.11.0

Posti Shipping

Author

Posti

3.0(4)

60/100

Last Updated

2026-09-10 (3d ago)

Active Installs

1,000+

Downloads

31,773

Requires WP

5.0+

Requires PHP

7.1+

Tested up to

WP 7.1

Created

2020-08-20 (6y ago)

Posti is a shipping service provider in Finland. This plugin integrates Posti’s parcel shipping services into WooCommerce. To start shipping, all your WooCommerce needs is this plugin and API credentials of your account registered with Posti. Order API credentials to use the plugin. (https://www.posti.fi/yrityksille/asiakastuki/ohjeet/verkkokaupan-integraatiot) This plugin requires at least WooCommerce version 4.7.0. Features Integrates Posti parcel shipping services with WooCommerce. Supports WooCommerce shipping zones and classes. Customers can choose to ship products to an address or to any pickup point. Store owners can add pickup points to any shipping zone’s shipping method. Store owners can use whatever shipping pricing plugin Store owners can generate the shipping label by one click. Store owners can generate shipping labels as mass action from orders view. Store owners and customers get tracking code links and status information. Support for Cash-On-Delivery.

View on WordPress.org