99 matches found
CVE-2024-4233 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares
Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...
CVE-2024-4233
CVE-2024-4233 is a Missing Authorization vulnerability affecting Tyche Softwares plugins: Print Invoice & Delivery Notes for WooCommerce (up to v4.8.1), Arconix Shortcodes (up to v2.1.10), and Arconix FAQ (up to v1.9.3). Connected PT security details specify the issue can be exploited remotely. R...
CVE-2024-33585
Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce.This issue affects Payment Gateway Based Fees and Discounts for WooCommerce: from n/a through 2.12.1...
CVE-2024-33585
CVE-2024-33585 is described as a Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce, affecting versions up to 2.12.1. Public metrics report CVSS 3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N with a base score of 4.3 (Medium). Exploita...
CVE-2024-33585 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce.This issue affects Payment Gateway Based Fees and Discounts for WooCommerce: from n/a through 2.12.1...
CVE-2024-31920
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Currency per Product for WooCommerce.This issue affects Currency per Product for WooCommerce: from n/a through 1.6.0...
CVE-2024-31431
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Product Input Fields for WooCommerce.This issue affects Product Input Fields for WooCommerce: from n/a through 1.7.0...
CVE-2024-31431
CVE-2024-31431: CSRF in Tyche Softwares Product Input Fields for WooCommerce affects Product Input Fields for WooCommerce versions up to 1.7.0 (no details on root cause beyond CSRF and no patch/version provided in the available documents). Affects the plugin for WooCommerce; reported by Red Hat/W...
CVE-2024-31431 WordPress Product Input Fields for WooCommerce plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Product Input Fields for WooCommerce.This issue affects Product Input Fields for WooCommerce: from n/a through 1.7.0...
CVE-2024-31920 WordPress Currency per Product for WooCommerce plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Currency per Product for WooCommerce.This issue affects Currency per Product for WooCommerce: from n/a through 1.6.0...
CVE-2024-31920
CVE-2024-31920 is a CSRF vulnerability in Tyche Softwares’ Currency per Product for WooCommerce, affecting the plugin up to version 1.6.0. The Wordfence entry notes a public vulnerability with patch status listed as Patched; remediation is to upgrade to a fixed version when available and monitor ...
CVE-2024-32434
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...
CVE-2024-32434 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...
CVE-2024-32434
CVE-2024-32434 is a CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce, affecting the plugin versions up to 3.20.2. Connected sources confirm the same entry; no public details on root cause or fix version are provided beyond this scope. The vulnerability impact and remediat...
CVE-2024-32434 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2...
CVE-2023-44986
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
CVE-2023-44986
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin = 5.15.2 versions...