CVE-2024-31920

CVE-2024-31920 is a CSRF vulnerability in Tyche Softwares’ Currency per Product for WooCommerce, affecting the plugin up to version 1.6.0. The Wordfence entry notes a public vulnerability with patch status listed as Patched; remediation is to upgrade to a fixed version when available and monitor ...

CVE-2024-32434

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...

CVE-2024-32434 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...

CVE-2024-32434 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...

CVE-2024-32434

CVE-2024-32434 is a CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce, affecting the plugin versions up to 3.20.2. Connected sources confirm the same entry; no public details on root cause or fix version are provided beyond this scope. The vulnerability impact and remediat...

CVE-2023-52202

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

CVE-2023-52202 WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

CVE-2023-52202 WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0...

CVE-2023-52207

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0...

CVE-2023-52205 WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This issue affects HTML5 SoundCloud Player with Playlist Free: from n/a through 2.8.0...

CVE-2023-52205 WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This issue affects HTML5 SoundCloud Player with Playlist Free: from n/a through 2.8.0...

CVE-2023-52207 WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0...

CVE-2023-44986

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

CVE-2023-44986

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...

CVE-2023-44986

CVE-2023-44986 affects WordPress plugin Abandoned Cart Lite for WooCommerce (Tyche Softwares) version

CVE-2023-41874

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin = 3.20.0 versions...

CVE-2023-41874

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin = 3.20.0 versions...

CVE-2023-41874

CVE-2023-41874 affects Tyche Softwares Order Delivery Date for WooCommerce plugin versions ≤ 3.20.0. The vulnerability is an unauthenticated, reflected XSS caused by insufficient sanitization/escaping of user-controlled parameters, enabling script injection in pages viewed by admins and other use...

PT-2023-28134 · Tyche Softwares · Order Delivery Date For Woocommerce

Name of the Vulnerable Software and Affected Versions: Tyche Softwares Order Delivery Date for WooCommerce plugin versions = 3.20.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...