Partial Shipment for WooCommerce

Partial Shipment for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is SQL Injection, behind 1 of the records (100%).

The one issue recorded for Partial Shipment for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by timomangcut. Partial Shipment for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Partial Shipment for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-48118

Woocommerce Partial Shipment <= 3.2 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

1 records
Partial Shipment for WooCommerce banner
Latestv3.6

Partial Shipment for WooCommerce

WpExperts Hub

Author

WpExperts Hub

4.4(9)
88/100
Last Updated
2026-08-14 (1mo ago)
Active Installs
1,000+
Downloads
26,860
Requires WP
6.9+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2018-05-03 (9y ago)
Requires Plugins
woocommerce

Partial Shipment for WooCommerce makes it easy to manage orders that need to be shipped in multiple parts. Store managers can ship specific products or quantities directly from the WooCommerce order edit screen while keeping the original order intact. The plugin keeps track of shipped and remaining quantities, automatically accounts for refunded items, and provides clear shipment information to both store managers and customers. Customers can view which items have been shipped directly from their order details page. With optional partial shipment status management and a simple backfill tool for existing orders, the plugin provides an easy way to manage partial fulfillment in WooCommerce. Basic Features 🔹 Partially ship a WooCommerce order, per item quantity, directly from the order edit screen. 🔹 Optional custom “Partially Shipped” order status. 🔹 Refund-aware quantities — fully-refunded items are marked “Refunded” and excluded from shippable counts, and the “Not Shipped” badge shows the quantity still to ship. 🔹 Backfill existing orders of any status with shipment records in one click (refund-aware, skips orders that already have records). 🔹 Status badges on the admin order-list popup and the customer’s View Order page. 🔹 Customer can see the shipped items on the order detail page. 🔹 Translation ready — ships a .pot and loads the text domain. ➡ GET PREMIUM VERSION NOW! Premium Features Key Features &#9989; Partially ship WooCommerce orders with specific products or quantities. &#9989; Add Tracking Number, Tracking URL, and Shipping Provider to each shipment. &#9989; Create multiple partial or full shipments for a single order. &#9989; Manage shipments through Ready, Picked, Dispatched, and Delivered statuses. &#9989; Automatically update the order to “Partially Shipped” and complete it when fully shipped. &#9989; Send automatic shipment notification emails with tracking information. &#9989; Choose when to send shipment emails — when created or when marked as Picked. &#9989; Display shipment details, tracking information, and shipment timeline to customers. &#9989; Add Estimated Delivery Date, customer notes, and internal shipment notes. &#9989; Print Packing Slips and Delivery Notes for individual shipments. &#9989; Provide a public shipment tracking page using a shortcode. &#9989; Add custom Shipping Providers and tracking URLs. &#9989; Retrieve and update shipment data using the REST API. &#9989; Send shipment events to external systems using Webhooks. &#9989; Track fulfillment progress with Fulfillment Reports and CSV export. &#9989; Automatically account for refunded quantities when calculating remaining items to ship. &#9989; Bulk create shipments and backfill existing WooCommerce orders. &#9989; Fast and dedicated support.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C