Lucene search

K

TYCHE Security Vulnerabilities

cve
cve

CVE-2024-4233

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...

4.3CVSS

7.2AI Score

0.0004EPSS

2024-05-08 02:15 PM
33
cve
cve

CVE-2024-33585

Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce.This issue affects Payment Gateway Based Fees and Discounts for WooCommerce: from n/a through...

4.3CVSS

7.5AI Score

0.0004EPSS

2024-04-29 01:15 PM
24
cve
cve

CVE-2024-31920

Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Currency per Product for WooCommerce.This issue affects Currency per Product for WooCommerce: from n/a through...

4.3CVSS

7.5AI Score

0.0004EPSS

2024-04-15 10:15 AM
29
cve
cve

CVE-2024-32434

Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through...

4.3CVSS

7.5AI Score

0.0004EPSS

2024-04-15 09:15 AM
25
cve
cve

CVE-2024-31431

Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Product Input Fields for WooCommerce.This issue affects Product Input Fields for WooCommerce: from n/a through...

4.3CVSS

7.5AI Score

0.0004EPSS

2024-04-15 10:15 AM
28
cve
cve

CVE-2019-25152

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping....

6.1CVSS

6.5AI Score

0.001EPSS

2023-06-22 02:15 AM
14
cve
cve

CVE-2023-44986

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin <= 5.15.2...

4.8CVSS

5.8AI Score

0.0004EPSS

2023-10-16 11:15 AM
20
cve
cve

CVE-2023-41874

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin <= 3.20.0...

6.1CVSS

5.9AI Score

0.0005EPSS

2023-09-25 01:15 AM
16
cve
cve

CVE-2022-45367

Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin <= 1.4.0...

8.8CVSS

9.1AI Score

0.001EPSS

2023-05-25 10:15 AM
17
cve
cve

CVE-2023-23703

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Arconix Shortcodes plugin <= 2.1.7...

5.4CVSS

5.2AI Score

0.0005EPSS

2023-05-16 10:15 AM
15