CVE-2026-65536

Name of the Vulnerable Software and Affected Versions افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) versions prior to 4.4.6

Description An unauthenticated Cross-Site Request Forgery (CSRF) issue exists due to missing or incorrect nonce validation on a function. This allows an attacker to perform unauthorized actions by tricking a site administrator into clicking a malicious link. CSRF is a type of attack that forces an authenticated user to execute unwanted actions on a web application in which they are currently authenticated.

Recommendations Update the plugin to a version newer than 4.4.5.