Aftership Tracking CVEs and Security Vulnerabilities

Vulnerabilities (Aftership Tracking)

CVE-2026-66460

WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Aftership & Automizely Wordpress

Products

Aftership Tracking Wordpress

CVE-2025-58201

WordPress AfterShip Tracking Plugin <= 1.17.17 - Broken Access Control Vulnerability

Missing Authorization vulnerability in AfterShip & Automizely AfterShip Tracking aftership-woocommerce-tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AfterShip Tracking: from n/a through <= 1.17.17.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed