CVE-2026-120558 | Zorem Advanced Shipment Tracking for WooCommerce Plugin up to 3.9 on WordPress REST Endpoint get_provider_slug_from_name tracking_provider sql injection

SecurityVulns
Yanac

A vulnerability classified as problematic was found in Zorem Advanced Shipment Tracking for WooCommerce Plugin up to 3.9 on WordPress. This impacts the function WC_Advanced_Shipment_Tracking_Admin::get_provider_slug_from_name of the component REST Endpoint. The manipulation of the argument tracking_provider results in sql injection.

This vulnerability is cataloged as CVE-2026-120558. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More