WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Order Delivery & Pickup Location Date Time versions = 1.1.0...

CVE-2024-32434

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...

CVE-2024-32434

CVE-2024-32434 is a CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce, affecting the plugin versions up to 3.20.2. Connected sources confirm the same entry; no public details on root cause or fix version are provided beyond this scope. The vulnerability impact and remediat...

CVE-2024-32434 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...

WordPress Plugin Order Delivery Date for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Order Delivery Date for...

WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Order Delivery Date for WooCommerce versions = 3.20.2...

WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Order Delivery Date for WooCommerce Type Plugin Vulnerable versions = 3.20.2 Fixed in 3.21.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32434 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 18c901690cac Credi...

CVE-2024-0678

The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2024-0678

The CVE-2024-0678 entry concerns the WordPress plugin Order Delivery Date for WP e-Commerce. The vulnerability is a Stored Cross-Site Scripting (XSS) in the available-days-tf parameter, affecting all versions up to 1.2. Root cause: insufficient input sanitization and output escaping. Impact: unau...

WordPress plugin Order Delivery Date for WP e-Commerce security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Order Delivery Date for WP e-Commerce Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0678 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9f553bdb479d Credits...

CVE-2023-45006

Unauth. Reflected Cross-Site Scripting XSS vulnerability in ByConsole WooODT Lite – WooCommerce Order Delivery or Pickup with Date Time Location plugin = 2.4.6 versions...

CVE-2023-45006

Summary of CVE-2023-45006 (WordPress ByConsole WooODT Lite) : An unauthenticated reflected Cross-Site Scripting (XSS) vulnerability exists in the ByConsole WooODT Lite – WooCommerce Order Delivery or Pickup with Date Time Location plugin for WordPress, affecting versions

CVE-2023-41858

Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...

CVE-2023-41858 WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...

CVE-2023-41858

CVE-2023-41858 is a CSRF vulnerability in the WordPress plugin Order Delivery Date for WP e-Commerce (versions &lt;= 1.2). Root cause: CSRF allows unauthorized actions on behalf of an authenticated user. Impact per sources: high confidentiality, integrity, and availability impact (CVSS 3.1/3.1 ve...

WordPress Plugin Order Delivery Date for WP e-Commerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2023-41859

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin = 1.2 versions...