Residential Address Detection
Residential Address Detection has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 3 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (100%).
Every one of the 3 issues recorded for Residential Address Detection has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Residential Address Detection is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-27270Residential Address Detection <= 2.5.4 - Unauthenticated Arbitrary Options Update
Read the full analysisVulnerability Records
Residential Address Detection
Author
enituretechnology
An add-on plugin developed by Eniture Technology. The plugin works with Eniture Technology’s Small Package Quotes and LTL Freight Quotes plugins. It identifies the address type of the ship-to address provided by website visitors. When the address type is residential, the residential delivery fee is included in the shipping rate estimate returned by the carrier. Key Features When enabled, automatically identifies residential and commercial addresses. Requirements WooCommerce 6.4 or newer. The installation of at least one of Eniture Technology’s Small Package Quotes or LTL Freight Quotes plugins.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C