AfterShip & Automizely vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2026-66460AfterShip Tracking (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-08-13CVE Database V5CVE-2026-66460 Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions. EPSS 0.2%Vulnerability AfterShip & Automizely CWE-79 #ghsa-vrxg-jj52-cf9v	CVE Database V5	2026-08-13
Medium	5.3	EPSS 0.2%	CVE-2025-58201AfterShip Tracking (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2025-08-27CVE Database V5CVE-2025-58201 Missing Authorization vulnerability in AfterShip & Automizely AfterShip Tracking aftership-woocommerce-tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AfterShip Tracking: from n/a through <= 1.17.17. EPSS 0.2%Vulnerability AfterShip & Automizely	CVE Database V5	2025-08-27

Page 1 of 1