CVE-2026-120558 Blast Radius

HIGH • CVSS 7.2The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tracking_provider` parameter of the `POST …

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-120558.

Book a Demo →← Back to CVE-2026-120558