Vendor/product archive

tychesoftwares / order_delivery_date_for_wp_e-commerce CVEs

Beta · best-effort

2 CVEs tagged to tychesoftwares / order_delivery_date_for_wp_e-commerce — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to tychesoftwares vendor archive

CVE-2024-0678

Published Feb 5, 2024

The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and includ…

CVSS 6.5 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2023-41859

Published Oct 2, 2023

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.

CVSS 5.9 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1