SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce
Healthy: vulnerability published 19 Oct 2026, fixed in 1.23.4.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 1.23.4. Update to version 1.23.4 or later.19 Oct 2026Evidence
- WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 1.23.4. Update to version 1.23.4 or later.19 Oct 2026Evidence
- WarningSEC-1Vulnerability published 3 Oct 2026, fixed in 1.23.3. Update to version 1.23.3 or later.3 Oct 2026Evidence
- WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 1.23.4. Update to version 1.23.4 or later.3 Sep 2026Evidence
- InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 5 Jun 2019 to 5 Jun 2019, 1 commits |
|---|---|
| kirillbdev | 6 Jun 2019 to 27 Oct 2026, 146 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 7 days ago
- Releases, 24 months
- 83
- Tested up to
- 7.1 current
- Requires PHP
- 8.0 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 1 |
| Q4 2024 | 2 |
| Q1 2025 | 6 |
| Q2 2025 | 19 |
| Q3 2025 | 8 |
| Q4 2025 | 20 |
| Q1 2026 | 7 |
| Q2 2026 | 4 |
| Q3 2026 | 13 |
| Q4 2026 | 6 |
Last release 27 Oct 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 19 Oct 2026 | SmartyParcel <= 1.23.3 - Unauthenticated Insecure Direct Object Reference | 5.3 | <= 1.23.3 | 1.23.4 | 0 |
| 19 Oct 2026 | SmartyParcel (WC Ukr Shipping) <= 1.23.3 - Missing Authorization | 4.3 | <= 1.23.3 | 1.23.4 | 0 |
| 3 Oct 2026 | SmartyParcel – Shipping Automation & Order Tracking for GLS, InPost, Nova Post and more <= 1.23.2 - Missing Authorization | 4.3 | <= 1.23.2 | 1.23.3 | 0 |
| 3 Sep 2026 | SmartyParcel – Multi-Carrier Shipping, Order Tracking & Live Rates for WooCommerce <= 1.23.3 - Authenticated (Subscriber+) Insecure Direct Object Reference | 4.3 | <= 1.23.3 | 1.23.4 | 38 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.6 from 56 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 49 |
|---|---|
| 4 star | 1 |
| 3 star | 1 |
| 2 star | 2 |
| 1 star | 3 |
Momentum
7,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 115 |
|---|---|
| 11 May 2026 | 260 |
| 18 May 2026 | 320 |
| 25 May 2026 | 1,515 |
| 1 Jun 2026 | 1,836 |
| 8 Jun 2026 | 492 |
| 15 Jun 2026 | 1,529 |
| 22 Jun 2026 | 397 |
| 29 Jun 2026 | 1,303 |
| 6 Jul 2026 | 649 |
| 13 Jul 2026 | 1,481 |
| 20 Jul 2026 | 670 |
| 27 Jul 2026 | 419 |
| 3 Aug 2026 | 393 |
| 10 Aug 2026 | 1,172 |
| 17 Aug 2026 | 1,317 |
| 24 Aug 2026 | 2,341 |
| 31 Aug 2026 | 1,523 |
| 7 Sep 2026 | 1,784 |
| 14 Sep 2026 | 1,200 |
| 21 Sep 2026 | 2,196 |
| 28 Sep 2026 | 1,992 |
| 5 Oct 2026 | 1,438 |
| 12 Oct 2026 | 2,476 |
| 19 Oct 2026 | 1,652 |
| 26 Oct 2026 | 2,415 |
| 2 Nov 2026 | 159 |
Weekly downloads over the last 4 weeks are 37% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.23.9 |
|---|---|
| Author | kirillbdev |
| Added | 6 Jun 2019 |
| Last updated | 27 Oct 2026 |
| Active installs | 7,000+ |
| Requires WordPress | not stated |
| Tested up to | 7.1.4 |
| Requires PHP | 8.0 |
| Category | E-commerce & Shopping |
| Tags | gls, inpost, nova post, DHL Express, order tracking |
Other plugins by this author: Qodax Checkout Manager - Checkout Field Editor for WooCommerce, LiqPay payment gateway for WooCommerce, Custom Field Builder - WordPress custom fields plugin, Slidee - Simple and fast SEO friendly slider
Questions
Is SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce still maintained?
SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce was last updated on 27 Oct 2026. Its Canary status is Healthy.
Is SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce safe?
SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce?
The wordpress.org author is kirillbdev. Recent committers: kirillbdev, plugin-master. We have recorded no ownership change.
What can I use instead of SmartyParcel - DHL Express, GLS, InPost & Nova Post for WooCommerce?
Plugins in the same category with a higher Canary Score: Shipping Live Rates for USPS for WooCommerce, Weight Based Shipping Table Rate for WooCommerce - Flexible Shipping, Weight Based Shipping for WooCommerce, Advanced Free Shipping for WooCommerce, ShipStation for WooCommerce.