WordPress Big Post Shipping for WooCommerce plugin cross-site scripting vulnerability

WordPress Big Post Shipping for WooCommerce plugin is a WooCommerce plugin that is mainly used to display real-time shipping quotes and logistics options in WooCommerce websites. The WordPress Big Post Shipping for WooCommerce plugin suffers from a cross-site scripting vulnerability that stems fr...

EUVD-2025-31688

Malicious code in bioql PyPI...

CVE-2025-10191

The Big Post Shipping for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wooboigpostshippingstatus' shortcode in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2025-10191 Big Post Shipping for WooCommerce <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Big Post Shipping for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wooboigpostshippingstatus' shortcode in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This...

PT-2025-39936

Name of the Vulnerable Software and Affected Versions The Big Post Shipping for WooCommerce plugin versions prior to 2.1.2 Description The software is susceptible to Stored Cross-Site Scripting through the 'wooboigpost shipping status' shortcode. Insufficient input sanitization and output escapin...