Tychesoftwares Order Delivery Date For Woocommerce vulnerabilities

8 vulnerabilities

Known vulnerabilities in Tychesoftwares Order Delivery Date For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2025-63024tychesoftwaresorder_delivery_date_for_woocommerce+1
EPSS score
0.23%
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through <= 4.3.1.7.1CVE-2025-2929tychesoftwaresorder_delivery_date_for_woocommerce+2
EPSS score
0.27%
The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin5.3CVE-2025-2942tychesoftwaresorder_delivery_date_for_woocommerce+2
EPSS score
0.30%
The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information4.3CVE-2025-58599tychesoftwaresorder_delivery_date_for_woocommerce+1
EPSS score
0.24%
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through <= 4.1.0.7.2CVE-2026-65559tychesoftwaresorder_delivery_date_for_woocommerce+1
EPSS score
0.46%
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.9.3CVE-2026-42386tychesoftwaresorder_delivery_date_for_woocommerce+1
EPSS score
0.40%
Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.7.1CVE-2023-41874tyche softwaresorder delivery date for woocommerce+2
EPSS score
0.41%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin <= 3.20.0 versions.8.8CVE-2023-41858ashok raneorder delivery date for wp e-commerce+2
EPSS score
0.26%
Cross-Site Request Forgery (CSRF) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.