CVE-2026-57773: Zorem Advanced Shipment Tracking For Woocommerce

High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-advanced-shipment-tracking allows Blind SQL Injection.This issue affects Advanced Shipment Tracking for WooCommerce: from n/a through <= 4.0.

Affected products

• Zorem Advanced Shipment Tracking For Woocommerce: up to and including 4.0

Published 2026-07-13. Last modified 2026-07-13.