Shipo vulnerabilities
We track 1 vulnerability in Shipo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Shipo vulnerabilities
- 9.8 Critical severity
Shipo: Improper Authentication
The Shipo plugin for WordPress is vulnerable to Authentication Bypass in versions 1.6 through 1.8.0. This is due to the `authenticate_rest_user()` function parsing the `LOGGED_IN_COOKIE` value and authenticating the named user without verifying the cookie's cr