109 matches found
CVE-2023-44986
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
CVE-2023-44986
CVE-2023-44986 affects WordPress plugin Abandoned Cart Lite for WooCommerce (Tyche Softwares) version
PT-2023-29332
Name of the Vulnerable Software and Affected Versions Tyche Softwares Abandoned Cart Lite for WooCommerce plugin versions = 5.15.2 Description The issue is related to an Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with administrative access can...
CVE-2023-44986: Improper Neutralization of Input During Web Page Generation
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
CVE-2023-41874
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin = 3.20.0 versions...
CVE-2023-41874
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin = 3.20.0 versions...
CVE-2023-41874
CVE-2023-41874 affects Tyche Softwares Order Delivery Date for WooCommerce plugin versions ≤ 3.20.0. The vulnerability is an unauthenticated, reflected XSS caused by insufficient sanitization/escaping of user-controlled parameters, enabling script injection in pages viewed by admins and other use...
PT-2023-28134 · Tyche Softwares · Order Delivery Date For Woocommerce
Name of the Vulnerable Software and Affected Versions: Tyche Softwares Order Delivery Date for WooCommerce plugin versions = 3.20.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...
CVE-2023-41874: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin = 3.20.0 versions...
WordPress Plugin Tyche Softwares Order Delivery Date for WooCommerce Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Tyche Softwares Order...
Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites
A critical security flaw has been disclosed in the WordPress "Abandoned Cart Lite for WooCommerce" plugin that's installed on more than 30,000 websites. "This vulnerability makes it possible for an attacker to gain access to the accounts of users who have abandoned their carts, who are typically...
Tyche Softwares Addresses Authentication Bypass Vulnerability in Abandoned Cart Lite for WooCommerce WordPress Plugin
On May 29, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in Tyche Softwares’s Abandoned Cart Lite for WooCommerce plugin, which is actively installed on more than 30,000 WordPress websites. This...
WordPress Abandoned Cart Lite For WooCommerce 5.14.2 Authentication Bypass
On May 29, 2023, our Wordfence Threat Intelligence team identified and began the responsible disclosure process for an Authentication Bypass vulnerability in Tyche Softwares’s Abandoned Cart Lite for WooCommerce plugin, which is actively installed on more than 30,000 WordPress websites. This...
CVE-2022-45367
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...
CVE-2022-45367
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...
CVE-2022-45367 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...
CVE-2022-45367 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Custom Order Numbers for WooCommerce plugin = 1.4.0 versions...
