Joovii vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2025-62976Sendle Shipping (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-10-27CVE Database V5CVE-2025-62976 Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sendle Shipping: from n/a through <= 6.02. EPSS 0.3%Vulnerability Joovii	CVE Database V5	2025-10-27
Medium	4.3	EPSS 0.1%	CVE-2025-60139Sendle Shipping (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-09-26CVE Database V5CVE-2025-60139 Cross-Site Request Forgery (CSRF) vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Cross Site Request Forgery.This issue affects Sendle Shipping: from n/a through <= 6.02. EPSS 0.1%Vulnerability Joovii CWE-352	CVE Database V5	2025-09-26

Page 1 of 1