WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce

WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.4, and the most serious one scores 6.5 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Incorrect Authorization, behind 1 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.

Every one of the 3 issues recorded for WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2026-52700

WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce <= 3.0.2 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

3 records


2026-06-10 00:00	WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce <= 3.0.2 - Authenticated (Subscriber+) SQL Injection WCMultiShipping <= 3.0.2	`CVE-2026-52700`	6.5 Medium	ParkHyunWoo	Yes
2023-11-28 00:00	Chronopost & Mondial relay pour WooCommerce - WCMultiShipping <= 2.3.7 - Incorrect Authorization WCMultiShipping <= 2.3.7	`N/A`	5.3 Medium	Anonymous	Yes
2023-11-21 00:00	WCMultiShipping <= 2.3.5 - Missing Authorization to Log Export WCMultiShipping <= 2.3.5	`CVE-2023-48274`	4.3 Medium	Abdi Pranata	Yes

Showing 1–3 of 3 reports