Log in Start free

Tychesoftwares

Products

ProductCVEsExploitedLatest
Arconix Shortcodes8–Dec 1, 2025
Print Invoice & Delivery Notes for WooCommerce7–Jun 26, 2026
Abandoned Cart Lite for WooCommerce5–Jul 27, 2026
Order Delivery Date for WooCommerce4–Aug 6, 2026
Product Delivery Date for WooCommerce – Lite3–Dec 30, 2025
Product Input Fields for WooCommerce3–Mar 8, 2025
Arconix FAQ2–Jun 17, 2025
Custom Order Numbers for WooCommerce1–Nov 21, 2025
Payment Gateway Based Fees and Discounts for WooCommerce1–Jun 26, 2026
Call for Price for WooCommerce1–May 2, 2026
Order Delivery Date for WP e-Commerce1–Feb 5, 2024

Exploited and recent CVEs

  • CVE-2026-65559 High 7.2 WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability 0.5%
  • CVE-2026-65557 Medium 5.9 WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57637 Medium 4.3 WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-56060 High 7.5 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2026-56048 Medium 6.5 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-42386 Critical 9.3 WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability 0.3%
  • CVE-2026-6447 Medium 4.4 Call for Price for WooCommerce <= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings 0.3%
  • CVE-2026-25317 High 7.5 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24946 Medium 6.5 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-69027 Medium 5.3 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 3.2.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-13773 Critical 9.8 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution 3.7%
  • CVE-2025-63024 Medium 5.4 WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability 0.2%
  • CVE-2025-13835 Medium 6.5 WordPress Arconix Shortcodes plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-66085 Medium 4.3 WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken Access Control vulnerability 0.2%
  • CVE-2025-66071 Medium 5.3 WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-58599 Medium 4.3 WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-49858 Medium 6.5 WordPress Arconix Shortcodes plugin <= 2.1.17 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49874 Medium 4.3 WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-49239 Medium 5.4 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-47673 High 7.1 WordPress Arconix Shortcodes plugin <= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-24621 High 7.1 WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32531 High 7.1 WordPress Arconix FAQ plugin <= 1.9.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-13359 High 8.1 Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload 1.0%
  • CVE-2024-13640 Medium 5.9 Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory 0.5%
  • CVE-2024-56242 Medium 6.5 WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-12210 Medium 4.3 Print Invoice & Delivery Notes for WooCommerce <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion 0.3%
  • CVE-2023-41671 Medium 5.4 WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability 0.5%
  • CVE-2024-10857 Medium 6.5 Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read 0.8%
  • CVE-2024-10882 Medium 6.1 Product Delivery Date for WooCommerce - Lite <= 2.8.0 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-10226 Medium 6.4 Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode 0.3%