What’s Vulnerable › Products

InPost PL vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your InPost PL version is affected

Latest InPost PL vulnerabilities

• CVE-2026-93580 — InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook (CVSS 5.3)
• CVE-2026-9702 — InPost PL < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking (CVSS 7.5)