WordPress security by component

Flat Shipping Rate by City for WooCommerce

Plugin description

Flat Shipping Rate by City for WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 14, 2026; the highest CVE/CNA score is 4.9.

Plugin slug: flat-shipping-rate-by-city-for-woocommerce

Latest vulnerability

CVE-2026-0678: Flat Shipping Rate by City for WooCommerce: SQL injection

Flat Shipping Rate by City for WooCommerce is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 14, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 14, 2026	CVE-2026-0678 Flat Shipping Rate by City for WooCommerce: SQL injection Flat Shipping Rate by City for WooCommerce is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE4.9 NVDPending