Where
-Infinity
0

WooCommerce Order Delivery Date Pro for WooCommerceOrder Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure

Risk 22
Severity
4.3
First published (updated )

WordPress Order Delivery Date for WooCommerceOrder Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS

Risk 50
Severity
7.1
First published (updated )

tychesoftwares Order Delivery Date Pro For Woocommerce WordpressOrder Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update

Risk 86
Severity
9.8
First published (updated )

WooCommerce Product Input Fields for WooCommerceProduct Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload

Risk 86
Severity
9.8
First published (updated )

tychesoftwares Arconix Shortcodes WordpressWordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Tyche Softwares Print Invoice & Delivery Notes for WooCommerceWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability

Risk 40
Severity
6.5
First published (updated )

WooCommerce Product Input Fields for WooCommerceProduct Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read

Risk 38
Severity
6.5
First published (updated )

tychesoftwares Arconix Shortcodes WordpressWordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )

tychesoftwares Arconix Faq WordpressWordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )

tychesoftwares Arconix Shortcodes WordpressArconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode

Risk 39
Severity
6.4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

tychesoftwares Arconix Shortcodes WordpressArconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 29
Severity
6.4
EPSS
0.04%
First published (updated )

tychesoftwares Product Delivery Date For Woocommerce WordpressProduct Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting

Risk 28
Severity
6.1
EPSS
0.05%
First published (updated )

tychesoftwares Order Delivery Date For Wp E-commerce WordpressOrder Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting

Risk 40
Severity
6.5
First published (updated )

tychesoftwares Print Invoice \& Delivery Notes For Woocommerce WordpressPrint Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS

Risk 38
Severity
6.1
First published (updated )

tychesoftwares Abandoned Cart Lite For Woocommerce WordpressWordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

tychesoftwares Order Delivery Date For Woocommerce WordpressWordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Risk 77
Severity
8.8
First published (updated )

tychesoftwares Order Delivery Date For Wp E-commerce WordpressWordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
First published (updated )

tychesoftwares Order Delivery Date For Woocommerce WordpressWordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
First published (updated )

tychesoftwares Abandoned Cart Lite For Woocommerce WordpressAbandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass

Risk 22
Severity
4.3
First published (updated )

tychesoftwares Abandoned Cart Lite For Woocommerce WordpressAbandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting

Risk 44
Severity
7.2
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

tychesoftwares Abandoned Cart Lite For Woocommerce WordpressAbandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

Risk 86
Severity
9.8
First published (updated )

tychesoftwares Product Input Fields For Woocommerce WordpressProduct Input Fields for WooCommerce <= 1.2.6 - Missing Authorization

Risk 43
Severity
7.5
First published (updated )

tychesoftwares Custom Order Numbers For Woocommerce WordpressWordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Risk 77
Severity
8.8
First published (updated )

tychesoftwares Arconix Shortcodes WordpressWordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)

Risk 46
Severity
6.5
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203