Log in Start free

Tyche Softwares

Products

ProductCVEsExploitedLatest
Abandoned Cart Pro for WooCommerce7–Oct 14, 2026
Arconix Shortcodes3–Nov 1, 2024
Order Delivery Date for WooCommerce2–Apr 15, 2024
Print Invoice & Delivery Notes for WooCommerce2–Dec 13, 2024
Product Delivery Date for WooCommerce – Lite2–Dec 23, 2025
Arconix FAQ2–Nov 1, 2024
Product Input Fields for WooCommerce1–Apr 15, 2024
Booking & Appointment Plugin for WooCommerce1–Nov 26, 2024
Currency per Product for WooCommerce1–Apr 15, 2024
Custom Order Numbers for WooCommerce1–May 25, 2023
Payment Gateway Based Fees and Discounts for WooCommerce1–Apr 29, 2024
Abandoned Cart Lite for WooCommerce1–Oct 16, 2023

Exploited and recent CVEs

  • CVE-2026-97657 Critical 9.8 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter 0.4%
  • CVE-2026-102251 High 7.5 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter 0.4%
  • CVE-2026-97668 Critical 9.8 Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value 0.4%
  • CVE-2026-81543 High 8.8 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation 0.4%
  • CVE-2026-66682 Critical 9.8 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability 0.5%
  • CVE-2026-56010 High 8.8 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability 0.4%
  • CVE-2023-52210 Medium 5.3 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-4387 High 8.8 Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload 0.6%
  • CVE-2022-46795 Medium 6.5 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability 0.6%
  • CVE-2024-10729 High 8.8 Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update 0.5%
  • CVE-2024-38702 Medium 5.3 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability 0.5%
  • CVE-2024-38769 Medium 5.3 WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability 0.4%
  • CVE-2024-38783 Medium 5.3 WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability 0.4%
  • CVE-2024-4233 Medium 4.3 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares 0.3%
  • CVE-2024-4233 Medium 4.3 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares 0.3%
  • CVE-2024-4233 Medium 4.3 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares 0.3%
  • CVE-2024-33585 Medium 4.3 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerability 0.3%
  • CVE-2024-31431 Medium 4.3 WordPress Product Input Fields for WooCommerce plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31920 Medium 4.3 WordPress Currency per Product for WooCommerce plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-32434 Medium 4.3 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-44986 Medium 5.9 WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-41874 High 7.1 WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-45367 Medium 4.3 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-23703 Medium 6.5 WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS) 0.4%