VYPR

Shipping Zones by Drawing for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-119065HigOct 31, 2026
    risk 0.47cvss 7.2epss —

    The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'szbd-picked' checkout parameter in versions up to, and including, 3.3.0 The szbd_checkout_field_update_order_meta() handler stores…