Skip to content

Tyche Softwares vulnerabilities

Products

Newest

tyche softwares abandoned cart pro for woocommerce Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter CVE-2026-97657 Public exploit 9.8 CriticalOctober 14, 2026
tyche softwares abandoned cart pro for woocommerce Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter CVE-2026-102251 7.5 HighOctober 14, 2026
tyche softwares abandoned cart pro for woocommerce Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value CVE-2026-97668 9.8 CriticalOctober 14, 2026
tyche softwares abandoned cart pro for woocommerce Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2026-81543 8.8 HighSeptember 5, 2026
tyche softwares abandoned cart pro for woocommerce WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability CVE-2026-66682 9.8 CriticalAugust 20, 2026
tyche softwares abandoned cart lite for woocommerce WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-65557 5.9 MediumJuly 27, 2026
tyche softwares abandoned cart lite for woocommerce Abandoned Cart Lite for WooCommerce < 6.8.2 - Unauthenticated Account Takeover via Malleable Recovery-Link Token CVE-2026-12585 8.1 HighJuly 16, 2026
tyche softwares abandoned cart lite for woocommerce WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-57637 4.3 MediumJune 26, 2026
tyche softwares payment gateway based fees and discounts for woocommerce WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-56048 6.5 MediumJune 26, 2026
tyche softwares abandoned cart pro for woocommerce WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability CVE-2026-56010 8.8 HighJune 26, 2026
tyche softwares product delivery date for woocommerce – lite WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.0 - Broken Access Control vulnerability CVE-2023-52210 5.3 MediumDecember 23, 2025
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability CVE-2025-13835 6.5 MediumDecember 1, 2025
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken Access Control vulnerability CVE-2025-66085 4.3 MediumNovember 21, 2025
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.17 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49858 6.5 MediumJune 17, 2025
tyche softwares abandoned cart pro for woocommerce Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-4387 8.8 HighJune 10, 2025
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-47673 7.1 HighMay 23, 2025
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24621 7.1 HighApril 17, 2025
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability CVE-2024-56242 6.5 MediumJanuary 2, 2025
tyche softwares abandoned cart lite for woocommerce WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-41671 5.4 MediumDecember 13, 2024
tyche softwares print invoice & delivery notes for woocommerce, tychesoftwares print invoice \& delivery notes for woocommerce +1 more WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability CVE-2022-46795 6.5 MediumDecember 13, 2024
tyche softwares booking & appointment plugin for woocommerce, tychesoftwares booking and appointment plugin for woo commerce +1 more Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update CVE-2024-10729 8.8 HighNovember 26, 2024
tyche softwares product delivery date for woocommerce – lite, tychesoftwares product delivery date for woocommerce lite +1 more WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability CVE-2024-38702 5.3 MediumNovember 1, 2024
tyche softwares arconix shortcodes WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability CVE-2024-38769 5.3 MediumNovember 1, 2024
tyche softwares arconix faq, tychesoftwares acronix faq +1 more WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability CVE-2024-38783 5.3 MediumNovember 1, 2024
tyche softwares arconix shortcodes Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode CVE-2024-10226 6.4 MediumOctober 29, 2024
tyche softwares arconix shortcodes Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-9703 6.4 MediumOctober 18, 2024
tyche softwares arconix faq, arconix shortcodes, print invoice & delivery notes for woocommerce +2 more Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares CVE-2024-4233 4.3 MediumMay 8, 2024
tyche softwares payment gateway based fees and discounts for woocommerce WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerability CVE-2024-33585 4.3 MediumApril 29, 2024
tyche softwares product input fields for woocommerce WordPress Product Input Fields for WooCommerce plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31431 4.3 MediumApril 15, 2024
tyche softwares currency per product for woocommerce WordPress Currency per Product for WooCommerce plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31920 4.3 MediumApril 15, 2024
tyche softwares order delivery date for woocommerce WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32434 4.3 MediumApril 15, 2024
tyche softwares abandoned cart lite for woocommerce WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-44986 5.9 MediumOctober 16, 2023
tyche softwares order delivery date for woocommerce WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41874 7.1 HighSeptember 25, 2023
tyche softwares abandoned cart lite for woocommerce Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass CVE-2021-4414 4.3 MediumJuly 12, 2023
tyche abandoned cart pro for woocommerce, tyche softwares abandoned cart lite for woocommerce +1 more Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting CVE-2019-25152 7.2 HighJune 22, 2023
tyche softwares abandoned cart lite for woocommerce Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass CVE-2023-2986 Public exploit EPSS 42.5% 9.8 CriticalJune 8, 2023
tyche softwares custom order numbers for woocommerce WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-45367 4.3 MediumMay 25, 2023
tyche softwares arconix shortcodes WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23703 6.5 MediumMay 16, 2023