High · 7.1 CVE-2023-41874 EUVD-2023-46365GHSA-h9mm-g94f-jv7h

WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)

Published Sep 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin <= 3.20.0 versions.

Vendor	Product	Affected	Fixed
Tyche Softwares	Order Delivery Date for WooCommerce	≤ 3.20.0	—