Tyche Softwares Order Delivery Date For Woocommerce vulnerabilities

2 known vulnerabilities affecting tyche_softwares/order_delivery_date_for_woocommerce.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2024-32434MEDIUMCVSS 4.3≥ n/a, ≤ 3.20.22024-04-15

CVE-2024-32434 [MEDIUM] CWE-352 CVE-2024-32434: Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Order Delivery Date for WooCommer Cross-Site Request Forgery (CSRF) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce.This issue affects Order Delivery Date for WooCommerce: from n/a through 3.20.2.

CVE-2023-41874MEDIUMCVSS 6.1≥ n/a, ≤ 3.20.02023-09-25

CVE-2023-41874 [MEDIUM] CWE-79 CVE-2023-41874: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date fo Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin <= 3.20.0 versions.