Vendor/product archive

tychesoftwares / order_delivery_date_for_woocommerce CVEs

Beta · best-effort

4 CVEs tagged to tychesoftwares / order_delivery_date_for_woocommerce — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to tychesoftwares vendor archive

CVE-2025-2942

Published Jul 11, 2025

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2025-2929

Published May 20, 2025

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2023-41858

Published Oct 10, 2023

Cross-Site Request Forgery (CSRF) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.

CVSS 4.3 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2023-41874

Published Sep 25, 2023

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin <= 3.20.0 versions.

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1