# cve.now: Tychesoftwares The newest entries naming Tychesoftwares as an affected vendor (up to 200), of 37 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-65559](https://cve.now/CVE-2026-65559.md): WordPress Order Delivery Date for WooCommerce plugin \<= 4.6.0 - Privilege Escalation vulnerability (CVSS 7.2) - [CVE-2026-65557](https://cve.now/CVE-2026-65557.md): WordPress Abandoned Cart Lite for WooCommerce plugin \<= 6.8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9) - [CVE-2026-57637](https://cve.now/CVE-2026-57637.md): WordPress Abandoned Cart Lite for WooCommerce plugin \<= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3) - [CVE-2026-56060](https://cve.now/CVE-2026-56060.md): WordPress Print Invoice & Delivery Notes for WooCommerce plugin \<= 7.1.1 - Sensitive Data Exposure vulnerability (CVSS 7.5) - [CVE-2026-56048](https://cve.now/CVE-2026-56048.md): WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin \<= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5) - [CVE-2026-42386](https://cve.now/CVE-2026-42386.md): WordPress Order Delivery Date for WooCommerce plugin \<= 4.5.1 - SQL Injection vulnerability (CVSS 9.3) - [CVE-2026-6447](https://cve.now/CVE-2026-6447.md): Call for Price for WooCommerce \<= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings (CVSS 4.4) - [CVE-2026-25317](https://cve.now/CVE-2026-25317.md): WordPress Print Invoice & Delivery Notes for WooCommerce plugin \<= 5.9.0 - Broken Access Control vulnerability (CVSS 7.5) - [CVE-2026-24946](https://cve.now/CVE-2026-24946.md): WordPress Print Invoice & Delivery Notes for WooCommerce plugin \<= 5.8.0 - Broken Access Control vulnerability (CVSS 6.5) - [CVE-2025-69027](https://cve.now/CVE-2025-69027.md): WordPress Product Delivery Date for WooCommerce – Lite plugin \<= 3.2.0 - Broken Access Control vulnerability (CVSS 5.3) - [CVE-2025-13773](https://cve.now/CVE-2025-13773.md): Print Invoice & Delivery Notes for WooCommerce \<= 5.8.0 - Unauthenticated Remote Code Execution (CVSS 9.8) - [CVE-2025-63024](https://cve.now/CVE-2025-63024.md): WordPress Order Delivery Date for WooCommerce plugin \<= 4.3.1 - Broken Access Control vulnerability (CVSS 5.4) - [CVE-2025-13835](https://cve.now/CVE-2025-13835.md): WordPress Arconix Shortcodes plugin \<= 2.1.20 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2025-66085](https://cve.now/CVE-2025-66085.md): WordPress Arconix Shortcodes plugin \<= 2.1.18 - Broken Access Control vulnerability (CVSS 4.3) - [CVE-2025-66071](https://cve.now/CVE-2025-66071.md): WordPress Custom Order Numbers for WooCommerce plugin \<= 1.11.0 - Broken Access Control vulnerability (CVSS 5.3) - [CVE-2025-58599](https://cve.now/CVE-2025-58599.md): WordPress Order Delivery Date for WooCommerce Plugin \<= 4.1.0 - Broken Access Control Vulnerability (CVSS 4.3) - [CVE-2025-49858](https://cve.now/CVE-2025-49858.md): WordPress Arconix Shortcodes plugin \<= 2.1.17 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5) - [CVE-2025-49874](https://cve.now/CVE-2025-49874.md): WordPress Arconix FAQ plugin \<= 1.9.6 - Broken Access Control Vulnerability (CVSS 4.3) - [CVE-2025-49239](https://cve.now/CVE-2025-49239.md): WordPress Print Invoice & Delivery Notes for WooCommerce plugin \<= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 5.4) - [CVE-2025-47673](https://cve.now/CVE-2025-47673.md): WordPress Arconix Shortcodes plugin \<= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2025-24621](https://cve.now/CVE-2025-24621.md): WordPress Arconix Shortcodes plugin \<= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2025-32531](https://cve.now/CVE-2025-32531.md): WordPress Arconix FAQ plugin \<= 1.9.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1) - [CVE-2024-13359](https://cve.now/CVE-2024-13359.md): Product Input Fields for WooCommerce \<= 1.12.0 - Unauthenticated Limited File Upload (CVSS 8.1) - [CVE-2024-13640](https://cve.now/CVE-2024-13640.md): Print Invoice & Delivery Notes for WooCommerce \<= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory (CVSS 5.9) - [CVE-2024-56242](https://cve.now/CVE-2024-56242.md): WordPress Arconix Shortcodes plugin \<= 2.1.14 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5) - [CVE-2024-12210](https://cve.now/CVE-2024-12210.md): Print Invoice & Delivery Notes for WooCommerce \<= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion (CVSS 4.3) - [CVE-2023-41671](https://cve.now/CVE-2023-41671.md): WordPress Abandoned Cart Lite for WooCommerce plugin \<= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4) - [CVE-2024-10857](https://cve.now/CVE-2024-10857.md): Product Input Fields for WooCommerce \<= 1.9 - Authenticated (Contributor+) Arbitrary File Read (CVSS 6.5) - [CVE-2024-10882](https://cve.now/CVE-2024-10882.md): Product Delivery Date for WooCommerce - Lite \<= 2.8.0 - Reflected Cross-Site Scripting (CVSS 6.1) - [CVE-2024-10226](https://cve.now/CVE-2024-10226.md): Arconix Shortcodes \<= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode (CVSS 6.4) - [CVE-2024-9703](https://cve.now/CVE-2024-9703.md): Arconix Shortcodes \<= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4) - [CVE-2024-9345](https://cve.now/CVE-2024-9345.md): Product Delivery Date for WooCommerce – Lite \<= 2.7.3 - Reflected Cross-Site Scripting (CVSS 6.1) - [CVE-2024-0678](https://cve.now/CVE-2024-0678.md): Order Delivery Date for WP e-Commerce \<= 1.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.5) - [CVE-2021-4414](https://cve.now/CVE-2021-4414.md): Abandoned Cart Lite for WooCommerce \<= 5.8.5 - Cross-Site Request Forgery Bypass (CVSS 4.3) - [CVE-2019-25152](https://cve.now/CVE-2019-25152.md): Abandoned Cart Lite for WooCommerce \< 5.2.0 and Abandoned Cart Pro for WooCommerce \< 7.13.0 - Stored Cross-Site Scripting (CVSS 7.2) - [CVE-2023-2986](https://cve.now/CVE-2023-2986.md): Abandoned Cart Lite for WooCommerce \<= 5.15.1 - Authentication Bypass (CVSS 9.8) - [CVE-2020-36696](https://cve.now/CVE-2020-36696.md): Product Input Fields for WooCommerce \<= 1.2.6 - Missing Authorization (CVSS 7.5) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/tychesoftwares Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.