Weight Based Shipping for WooCommerce
Weight Based Shipping for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Weight Based Shipping for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Muhammad Daffa. Weight Based Shipping for WooCommerce is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2022-46794WooCommerce Weight Based Shipping <= 5.4.1 - Cross-Site Request Forgery leading to Plugin Settings Changes
Read the full analysisVulnerability Records

Weight Based Shipping for WooCommerce
Author
Dan
Weight Based Shipping is a flexible and widely-used solution for sites using WooCommerce that allows store owners to calculate shipping costs based on the weight and value of the products in the cart. It offers various customization options to set shipping rules based on different conditions, enabling tailored shipping rates for different customer needs and scenarios. Tiered weight-based rates for weight ranges Weight Based Shipping allows creating incremental shipping costs based on defined weight ranges. For example, you can set a specific rate for orders up to 5 kg, a higher rate for 5–10 kg, and another rate for weights above 10 kg. This structure enables you to charge progressively more as the package weight increases, offering a fair and predictable pricing model that matches shipping costs to the weight of the items. Free shipping over a threshold Offer free shipping once an order reaches a specific threshold, such as a minimum cart total or a minimum/maximum weight. For example, you might provide free shipping on orders over $50 or on packages weighing more than 20 kg. This approach encourages customers to buy more to qualify for free shipping, boosting average order value while keeping lighter, smaller orders cost-effective. Shipping classes [Pro] Shipping classes support provides flexibility in configuring shipping rates for your products. You can set up custom shipping rates for specific product groups — frozen, fragile, bulky, drop-shipped, etc. Additionally, you have the option to offer free shipping for selected products or exclude certain items from free shipping. The feature also allows you to enable or disable specific shipping methods on a per-product basis. compare features more details Feel free to contact support if you have any questions. Like the plugin? Leave a review!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C