Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-38702 EUVD-2024-37553GHSA-j882-xmcr-wxwj

WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2.

Affected products

VendorProductAffectedFixed
Tyche Softwares Product Delivery Date for WooCommerce – Lite ≤ 2.7.2 —

References