Tychesoftwares

33 CVEs across 22 Tychesoftwares products. Browse Tychesoftwares vulnerabilities, severities, and proof-of-concept exploits.

Tychesoftwares products with known CVEs

ProductCVEs
Arconix Shortcodes8
Print Invoice & Delivery Notes For Woocommerce7
Abandoned Cart Lite For Woocommerce6
Arconix Shortcodes5
Abandoned Cart Lite For Woocommerce4
Order Delivery Date For Woocommerce4
Order Delivery Date For Woocommerce4
Product Delivery Date For Woocommerce – Lite3
Product Input Fields For Woocommerce3
Product Input Fields For Woocommerce3
Arconix Faq2
Order Delivery Date For Wp E-Commerce2
Print Invoice \& Delivery Notes For Woocommerce2
Abandoned Cart Pro For Woocommerce1
Arconix Faq1
Call For Price For Woocommerce1
Custom Order Numbers For Woocommerce1
Custom Order Numbers For Woocommerce1
Order Delivery Date For Wp E-Commerce1
Order Delivery Date Pro For Woocommerce1
Payment Gateway Based Fees And Discounts For Woocommerce1
Product Delivery Date For Woocommerce1
Tychesoftwares CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65559High7.22026-08-06Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.
CVE-2026-65557Medium5.92026-07-27Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.
CVE-2026-57637Medium4.32026-06-26Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.
CVE-2026-56060High7.52026-06-26Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions.
CVE-2026-56048Medium6.52026-06-26Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.
CVE-2026-42386Critical9.32026-06-15Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.
CVE-2026-6447Medium4.42026-05-02The Call for Price for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4…
CVE-2026-25317High7.52026-03-25Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly C…
CVE-2026-24946Medium6.52026-02-20Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly C…
CVE-2025-69027Medium5.32025-12-30Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows Exploiting…
CVE-2025-13773Critical9.82025-12-24The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via…
CVE-2025-63024Medium5.42025-12-09Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Con…
CVE-2025-13835Medium6.52025-12-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allo…
CVE-2025-66085Medium4.32025-11-21Missing Authorization vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Exploiting Incorrectly Configured Access Control Security Le…
CVE-2025-66071Medium5.32025-11-21Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly C…
CVE-2025-58599Medium4.32025-09-03Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Con…
CVE-2025-2942Medium4.32025-07-11The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action…
CVE-2025-49874Medium4.32025-06-17Missing Authorization vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2025-49858Medium6.52025-06-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allo…
CVE-2025-49239Medium5.42025-06-06Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site R…
CVE-2025-47673High7.12025-05-23Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allo…
CVE-2025-2929High7.12025-05-20The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C…
CVE-2025-2907Critical9.82025-04-26The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper ch…
CVE-2025-32531High7.12025-04-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Reflected X…
CVE-2025-24621High7.12025-04-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allo…
CVE-2024-13359High8.12025-03-08The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the add_produ…
CVE-2024-13640Medium5.92025-03-08The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5…
CVE-2024-56242Medium6.52025-01-02Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allo…
CVE-2024-12210Medium4.32024-12-24The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on…
CVE-2023-41671Medium5.42024-12-13Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart allows Exploiting Incorrectly Configured A…
CVE-2022-46795Medium6.52024-12-13Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control S…
CVE-2024-10857Medium6.52024-11-26The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handle_dow…
CVE-2024-10882Medium6.12024-11-13The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_…
CVE-2024-38783Medium5.32024-11-01Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix F…
CVE-2024-38769Medium5.32024-11-01Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ar…
CVE-2024-10226Medium6.42024-10-29The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including…
CVE-2024-9703Medium6.42024-10-18The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and includi…
CVE-2024-9345Medium6.12024-10-04The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without a…
CVE-2024-0678Medium6.52024-02-05The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versio…
CVE-2023-0479Medium6.12024-01-16The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within…
CVE-2023-44986Medium5.92023-10-16Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin <= 5.15.2 versions.
CVE-2023-41858Medium4.32023-10-10Cross-Site Request Forgery (CSRF) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.
CVE-2023-41859Medium5.92023-10-02Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.
CVE-2023-41874High7.12023-09-25Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin <= 3.20.0 versions.
CVE-2021-4414Medium4.32023-07-12The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.8.5. This is due t…
CVE-2019-25152High7.22023-06-22The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple…
CVE-2023-2986Critical9.82023-06-08The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to in…
CVE-2020-36696High7.52023-06-07The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_downloads()…
CVE-2022-45367Medium4.32023-05-25Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin <= 1.4.0 versions.
CVE-2023-23703Medium6.52023-05-16Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Arconix Shortcodes plugin <= 2.1.7 versions.