Known vulnerabilities in Unknown InPost PL
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-93580 | The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests,… | 5.3 Medium | Sep 30, 2026 |
| CVE-2026-9702 | The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before… | 7.5 High | Jun 25, 2026 |