Order Delivery Date For Woocommerce Security Vulnerabilities and Issues — Order Delivery Date For Woocommerce CVE List

Lucene search

TychesoftwaresOrder Delivery Date For Woocommerce

3 matches found

CVE•added 2025/04/26 6:15 a.m.•77 views

CVE-2025-2907

The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This leads to attackers being able to modify...

9.8CVSS7AI score0.02997EPSS

CVE•added 2025/05/20 6:15 a.m.•26 views

CVE-2025-2929

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

7.1CVSS6.1AI score0.0005EPSS

CVE•added 2025/07/11 6:15 a.m.•8 views

CVE-2025-2942

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

4.3CVSS6.6AI score0.00028EPSS