CVE-2026-65559: WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability

Published Aug 6, 2026

Updated

Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.

Affected Software

1 affected component

WooCommerce WordPress Order Delivery Date for WooCommerce plugin<=4.6.0

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Order Delivery Date for WooCommerce plugin to a version that resolves this vulnerability.
Fixed in 4.6.1

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-65559 is high with a score of 7.2.

CVE-2026-65559 is a privilege escalation vulnerability affecting the Order Delivery Date for WooCommerce plugin.

CVE-2026-65559 allows shop managers to escalate their privileges within the Order Delivery Date for WooCommerce plugin.

CVE-2026-65559 affects versions of the Order Delivery Date for WooCommerce plugin up to 4.6.0.

To fix CVE-2026-65559, you should update the Order Delivery Date for WooCommerce plugin to the latest version.