PLUGIN SECURITY
Is Weight Based Shipping for WooCommerce safe?
Weight Based Shipping is a flexible and widely-used solution to calculate shipping costs based on the total cart weight and value.
What this plugin does
- Slug:
weight-based-shipping-for-woocommerce - Author: Dan
- 50000+ active installs
- 92/100 rating (83 reviews on wordpress.org)
- 2770256 all-time downloads
- On WordPress.org since 2013-07-25
rule-based shippingtable rate shippingweight based shippingwoocommerce free shippingwoocommerce shipping
Maintenance status
- Last updated: 2026-08-21 9:10am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.3+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Weight Based Shipping for WooCommerce. Reported between 2023 and 2023.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-46794 | Weight Based Shipping for WooCommerce [weight-based-shipping-for-woocommerce] < 5.5.0 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 5.5.0 | 5.5.0 | 2023-03-13 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Weight Based Shipping Table Rate for WooCommerce – Flexible Shipping — 100000+ active installs — 98/100 (703)
- Table Rate Shipping for WooCommerce — 10000+ active installs — 92/100 (73) — max PHP 8.4
- Flat Rate Shipping Method for WooCommerce — 5000+ active installs — 84/100 (76) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.