Unpatched access control flaws in the plugin
Known Broken Access Control vulnerabilities in the plugin are reported repeatedly with no clear fixed version or upgrade path for site owners.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 17 March 2026 · last reported 9 October 2026
What's going wrong
Site owners running this FedEx shipping plugin on WooCommerce stores have received repeated security advisories flagging a Broken Access Control flaw, which can let visitors reach pages or actions they should not.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.