Cart Weight for WooCommerce
Cart Weight for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Cart Weight for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by Legion Hunter. Cart Weight for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-66109Cart Weight for WooCommerce <= 1.9.11 - Missing Authorization
Read the full analysisVulnerability Records

Cart Weight for WooCommerce
Author
Octolize Shipping Plugins
The best free plugin to display the total product weight in the cart, minicart, and checkout of your WooCommerce store The Cart Weight for WooCommerce plugin automatically displays the total product weight on the cart, minicart, and checkout pages. It does not require any additional configuration – just turn it on, and that’s it! English, Polish, and German translations included. You can easily translate it into other languages as well. Get more plugins for WooCommerce from Octolize We know WooCommerce shipping inside out and put all our experience into our plugins. Check our WooCommerce premium plugins here → Interested in plugin translations? We are actively looking for contributors to translate this and other Octolize plugins. Each supported language tremendously helps store owners to conveniently manage shipping operations. Your translations contribute to the WordPress community at large. Moreover, we’re glad to offer you discounts for our PRO plugins and establish long-term collaboration. If you have any translation-related questions, please email us at translations@octolize.com. Head over here and help us translate this plugin: https://translate.wordpress.org/projects/wp-plugins/woo-cart-weight/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C