Weight Based Shipping for WooCommerce

Weight Based Shipping for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Weight Based Shipping for WooCommerce has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Daffa. Weight Based Shipping for WooCommerce is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Weight Based Shipping for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2022-46794

WooCommerce Weight Based Shipping <= 5.4.1 - Cross-Site Request Forgery leading to Plugin Settings Changes

Read the full analysis

Vulnerability Records

1 records
Weight Based Shipping for WooCommerce banner
Latestv6.17.0

Weight Based Shipping for WooCommerce

Dan

Author

Dan

4.6(83)
92/100
Last Updated
2026-09-08 (5d ago)
Active Installs
50,000+
Downloads
2,791,125
Requires WP
5.8+
Requires PHP
7.3+
Tested up to
WP 7.1
Created
2013-07-25 (13y ago)

Weight Based Shipping is a flexible and widely-used solution for sites using WooCommerce that allows store owners to calculate shipping costs based on the weight and value of the products in the cart. It offers various customization options to set shipping rules based on different conditions, enabling tailored shipping rates for different customer needs and scenarios. Tiered weight-based rates for weight ranges Weight Based Shipping allows creating incremental shipping costs based on defined weight ranges. For example, you can set a specific rate for orders up to 5 kg, a higher rate for 5–10 kg, and another rate for weights above 10 kg. This structure enables you to charge progressively more as the package weight increases, offering a fair and predictable pricing model that matches shipping costs to the weight of the items. Free shipping over a threshold Offer free shipping once an order reaches a specific threshold, such as a minimum cart total or a minimum/maximum weight. For example, you might provide free shipping on orders over $50 or on packages weighing more than 20 kg. This approach encourages customers to buy more to qualify for free shipping, boosting average order value while keeping lighter, smaller orders cost-effective. Shipping classes [Pro] Shipping classes support provides flexibility in configuring shipping rates for your products. You can set up custom shipping rates for specific product groups — frozen, fragile, bulky, drop-shipped, etc. Additionally, you have the option to offer free shipping for selected products or exclude certain items from free shipping. The feature also allows you to enable or disable specific shipping methods on a per-product basis. compare features more details Feel free to contact support if you have any questions. Like the plugin? Leave a review!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C