Skip to content
OpenAdvisories

Vendor

Tyche Softwares

59 known vulnerabilities.

Products

Arconix Shortcodes 11 Print Invoice & Delivery Notes for WooCommerce 9 Abandoned Cart Lite for WooCommerce 7 Abandoned Cart Pro for WooCommerce 7 Order Delivery Date for WooCommerce 6 Product Delivery Date for WooCommerce – Lite 5 Arconix FAQ 4 Product Input Fields for WooCommerce 4 Custom Order Numbers for WooCommerce 2 Payment Gateway Based Fees and Discounts for WooCommerce 2 Currency per Product for WooCommerce 1 Booking & Appointment Plugin for WooCommerce 1 Call for Price for WooCommerce 1 Order Delivery Date for WP e-Commerce 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-97657 Public exploit

    Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter

    The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including, 10.8.0. This is due to the use of MAC-free AES-CTR encryption for cart-recove…

    Tyche Softwares Abandoned Cart Pro for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2026-97668

    Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value

    The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due to insufficient escaping on user supplied data and lack of sufficient preparat…

    Tyche Softwares Abandoned Cart Pro for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2026-66682

    WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

    Tyche Softwares Abandoned Cart Pro for WooCommerce Web / CMS
  • Critical 9.3
    CVE-2026-42386

    WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.

    Tyche Softwares Order Delivery Date for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-13773 Scanner template

    Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution

    The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update' function. This is due to missing capability check in the 'W…

    Tyche Softwares Print Invoice & Delivery Notes for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-2986 Public exploit EPSS 43%

    Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

    The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the p…

    Tyche Softwares Abandoned Cart Lite for WooCommerce Web / CMS